@usex/mikrotik-mcp 5.6.0 → 5.8.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@usex/mikrotik-mcp",
-  "version": "5.6.0",
+  "version": "5.8.0",
   "description": "MCP server for MikroTik RouterOS — 780+ tools over SSH for firewall, NAT, routing, DHCP, DNS, WireGuard, wireless, QoS and more.",
   "keywords": [
     "ai",
@@ -48,12 +48,13 @@
     "access": "public"
   },
   "scripts": {
-    "build": "bunup && chmod +x dist/cli.js && bun run build:ui",
+    "build": "bunup && chmod +x dist/cli.js && bun run test:built && bun run build:ui",
     "build:ui": "bun run --bun scripts/build-ui.ts",
     "build:mcp": "bun run --bun scripts/build-mcpb.ts",
     "build:mcp:all": "bun run --bun scripts/build-mcpb.ts --all",
     "dev": "bunup --watch",
-    "prepack": "bunup && chmod +x dist/cli.js && bun run build:ui && bun run gen",
+    "dev:dashboard": "bunx vp dev -c ui/vite.observability.config.ts",
+    "prepack": "bun run build && bun run gen",
     "auth-check": "bun run --bun src/cli.ts auth-check",
     "gen:schemas": "bun run --bun scripts/gen-schemas.ts && vp fmt --write schemas",
     "gen:docs": "bun run --bun scripts/gen-tool-docs.ts && vp fmt --write docs/tools-reference.md",
@@ -73,6 +74,7 @@
     "security:all": "bun run security:audit && bun run security:licenses",
     "prepublish:security": "npm run security:all",
     "test": "vp test run",
+    "test:built": "bun run --bun scripts/check-mcp-build.ts",
     "test:watch": "vp test",
     "test:coverage": "vp test --ui --coverage --watch",
     "release": "release-it",
@@ -85,59 +87,66 @@
     "prepare": "vp config"
   },
   "dependencies": {
-    "@modelcontextprotocol/ext-apps": "^1.7.5",
+    "@modelcontextprotocol/client": "^2.0.0",
+    "@modelcontextprotocol/core": "^2.0.0",
+    "@modelcontextprotocol/ext-apps": "^2.0.0",
     "@modelcontextprotocol/sdk": "^1.30.0",
     "@tikoci/centrs": "^0.1.0",
     "figlet": "^1.11.4",
     "gradient-string": "^3.0.0",
-    "ipaddr.js": "^2.4.0",
+    "ipaddr.js": "^2.5.0",
     "ssh2": "^1.17.0",
-    "zod": "^4.4.3"
+    "zod": "^4.6.5"
   },
   "devDependencies": {
     "@anthropic-ai/mcpb": "^2.1.2",
+    "@paper-design/shaders-react": "^0.0.80",
     "@resvg/resvg-js": "^2.6.2",
     "@tailwindcss/vite": "^4.3.3",
-    "@types/bun": "latest",
+    "@tanstack/react-virtual": "^3.14.13",
+    "@types/bun": "1.4.2",
     "@types/figlet": "^1.7.0",
-    "@types/node": "^26.1.2",
-    "@types/react": "^19.2.18",
-    "@types/react-dom": "^19.2.4",
-    "@types/ssh2": "^1.15.5",
+    "@types/node": "^26.5.1",
+    "@types/react": "^19.3.0",
+    "@types/react-dom": "^19.3.0",
+    "@types/ssh2": "^1.15.6",
     "@types/update-notifier": "^6.0.8",
-    "@vitest/coverage-v8": "4.1.10",
-    "@vitest/ui": "4.1.10",
+    "@typescript/native": "npm:typescript@^7.0.2",
+    "@vitest/coverage-v8": "5.0.0",
+    "@vitest/ui": "5.0.0",
     "bunup": "^0.16.32",
     "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",
     "gsap": "^3.15.0",
+    "happy-dom": "^20.14.5",
+    "lenis": "^1.3.26",
     "license-checker": "^25.0.1",
-    "lucide-react": "^1.28.0",
+    "lucide-react": "^1.46.0",
+    "motion": "^13.3.0",
     "radix-ui": "^1.6.7",
-    "react": "^19.2.8",
-    "react-dom": "^19.2.8",
+    "react": "^19.3.0",
+    "react-dom": "^19.3.0",
     "recharts": "^3.10.1",
-    "release-it": "^21.0.1",
-    "sonner": "^2.0.7",
-    "tailwind-merge": "^3.6.0",
+    "release-it": "^21.0.3",
+    "shiki": "^4.4.3",
+    "sonner": "^2.0.8",
+    "tailwind-merge": "^3.7.0",
     "tailwindcss": "^4.3.3",
     "tw-animate-css": "^1.4.0",
+    "typescript": "npm:@typescript/typescript6@^6.0.2",
     "vite": "catalog:",
     "vite-plus": "catalog:"
   },
-  "peerDependencies": {
-    "typescript": "^7.0.2"
-  },
   "overrides": {
     "vite": "catalog:"
   },
   "engines": {
     "bun": ">=1.3.0"
   },
-  "packageManager": "bun@1.3.14",
+  "packageManager": "bun@1.4.2",
   "catalog": {
-    "vite": "npm:@voidzero-dev/vite-plus-core@0.2.4",
-    "vite-plus": "0.2.4"
+    "vite": "npm:@voidzero-dev/vite-plus-core@0.3.1",
+    "vite-plus": "0.3.1"
   },
   "changelog": {
     "labels": {

package/prompts/build-tunnel-transactionally.md

@@ -1,7 +1,7 @@
 ---
 name: build-tunnel-transactionally
 title: Build a site-to-site tunnel as one cross-device transaction
-description: Configure both ends of a tunnel under coordinated Safe Mode — verified while still uncommitted, then committed everywhere or rolled back everywhere. Never a half-built tunnel.
+description: Preferred coordinated workflow for both ends of an approved site-to-site tunnel — stage, verify, then commit with explicit approval; partial commits require manual recovery.
 arguments:
   - name: site_a
     description: Configured device name of the first router (one end of the tunnel).
@@ -15,7 +15,7 @@ arguments:
 ---
 
 Build a tunnel between **{{site_a}}** and **{{site_b}}** as a single
-cross-device transaction, so it either works on both ends or exists on neither.
+cross-device transaction, verifying both ends before issuing sequential commits.
 
 Tunnel to build: {{tunnel}}
 
@@ -35,14 +35,15 @@ Follow these steps:
 
 2. **Open the transaction.** Call `begin_transaction` with
    `devices=["{{site_a}}", "{{site_b}}"]`, a `label`, and — this is the part that
-   makes it safe — `assertions` that prove the tunnel actually works:
+   improves verification — `assertions` for the expected router-side state:
    - `{"kind": "ping", "from": "{{site_a}}", "to": "<{{site_b}} tunnel address>"}`
    - `{"kind": "wireguard-peer-handshake", "device": "{{site_a}}", "peer": "<{{site_b}} public key>"}`
      (WireGuard only)
-   - `{"kind": "reachable", "device": "{{site_b}}"}` — cheap insurance that the
+   - `{"kind": "reachable", "device": "{{site_b}}"}` — evidence that the
      far end is still answering after its own changes.
      Set `jump_host` if one router is reached through the other; the tool warns
-     when it is not committed last.
+     when it is not committed last. Set `commit_order` explicitly with that
+     participant last. Assertions do not prove client application health.
 
 3. **Queue every command.** One `add_transaction_step` per RouterOS command,
    naming the participant it runs on. Nothing executes yet. Cover both ends
@@ -51,15 +52,17 @@ Follow these steps:
 
 4. **Prepare and verify.** Call `verify_transaction`. This snapshots each device,
    applies its steps inside Safe Mode, and runs the assertions against the
-   still-uncommitted fleet. If anything fails, everything is rolled back
-   automatically and the result is `ABORTED` — nothing changed anywhere. Report
-   which assertion failed and fix the plan before retrying.
+   still-uncommitted fleet. This changes live traffic and requires prior approval;
+   it is not a read-only check. Failure triggers rollback attempts. Report every
+   participant's state and rollback evidence before considering a revised plan.
 
-5. **Commit.** Only after a clean verify, call `commit_transaction`. Read the
+5. **Commit.** Only after a clean verify and approval covering this exact commit,
+   call `commit_transaction`. Read the
    terminal state out loud:
    - `COMMITTED` — both ends persisted; confirm with a final `ping` and
      `get_wireguard_status`.
-   - `ABORTED` — nothing changed; safe to retry.
+   - `ABORTED` — no participant committed; inspect rollback results and live state
+     before proposing a retry. Staged changes may already have affected traffic.
    - `PARTIAL` — **tell the user immediately and stop**. Name each device's state
      and the snapshot id in the report; the fix is a manual restore
      (`diff_config_snapshots <id> live`, then `config_reconcile` or

package/schemas/README.md

@@ -7,7 +7,7 @@ edit by hand — regenerate instead.
 | File                 | Contents                                                                                   |
 | -------------------- | ------------------------------------------------------------------------------------------ |
 | `config.schema.json` | The runtime configuration object (env vars / CLI flags).                                   |
-| `tool-catalog.json`  | Every one of the 891 tools: `name`, `risk`, `title`, `description`, and input JSON Schema. |
+| `tool-catalog.json`  | Every one of the 903 tools: `name`, `risk`, `title`, `description`, and input JSON Schema. |
 | `tools/<name>.json`  | The input JSON Schema for a single tool.                                                   |
 
 `risk` is derived from the MCP tool annotations:

package/schemas/config.schema.json

@@ -3,6 +3,84 @@
   "title": "MikrotikConfig",
   "type": "object",
   "properties": {
+    "serviceProbes": {
+      "default": {
+        "scheduled": {},
+        "targets": {},
+        "timeoutMs": 5000
+      },
+      "type": "object",
+      "properties": {
+        "scheduled": {
+          "default": {},
+          "type": "object",
+          "propertyNames": {
+            "type": "string"
+          },
+          "additionalProperties": {
+            "maxItems": 5,
+            "type": "array",
+            "items": {
+              "type": "string",
+              "format": "uuid",
+              "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$"
+            }
+          }
+        },
+        "targets": {
+          "default": {},
+          "type": "object",
+          "propertyNames": {
+            "type": "string",
+            "pattern": "^[a-z\\d_-]{1,64}$"
+          },
+          "additionalProperties": {
+            "type": "object",
+            "properties": {
+              "kind": {
+                "type": "string",
+                "enum": ["dns", "tcp", "tls", "https"]
+              },
+              "host": {
+                "type": "string",
+                "minLength": 1,
+                "maxLength": 253,
+                "pattern": "^[a-z\\d](?:[a-z\\d.-]*[a-z\\d])?$"
+              },
+              "port": {
+                "default": 443,
+                "type": "integer",
+                "minimum": 1,
+                "maximum": 65535
+              },
+              "path": {
+                "default": "/health",
+                "type": "string",
+                "maxLength": 1024
+              },
+              "addresses": {
+                "minItems": 1,
+                "maxItems": 32,
+                "type": "array",
+                "items": {
+                  "type": "string"
+                }
+              }
+            },
+            "required": ["kind", "host", "port", "path", "addresses"],
+            "additionalProperties": false
+          }
+        },
+        "timeoutMs": {
+          "default": 5000,
+          "type": "integer",
+          "minimum": 100,
+          "maximum": 10000
+        }
+      },
+      "required": ["scheduled", "targets", "timeoutMs"],
+      "additionalProperties": false
+    },
     "devices": {
       "default": {
         "default": {
@@ -808,6 +886,7 @@
     }
   },
   "required": [
+    "serviceProbes",
     "devices",
     "defaultDevice",
     "mcp",