@yawlabs/tailscale-mcp 0.10.7 → 0.10.9

package/README.md

@@ -210,7 +210,7 @@ MCP Resources expose read-only data clients can browse without a tool call.
 | ACL Policy | `tailscale://tailnet/acl` | Full ACL policy (HuJSON preserved) |
 | DNS Config | `tailscale://tailnet/dns` | Nameservers, search paths, split DNS, MagicDNS |
 
-## Tools (88)
+## Tools (89)
 
 <details>
 <summary><strong>Status</strong> (1 tool)</summary>

package/dist/index.js

@@ -31141,19 +31141,16 @@ function compute429DelayMs(retryAfter, attempt) {
   const base = Math.min(DEFAULT_429_DELAY_MS * 2 ** attempt, MAX_429_DELAY_MS);
   return base + Math.floor(Math.random() * 250);
 }
-async function executeFetch(method, url2, headers, body) {
+async function executeFetch(method, url2, headers, body, timeoutMs) {
   return fetch(url2, {
     method,
     headers,
     body,
-    signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS)
+    signal: AbortSignal.timeout(timeoutMs)
   });
 }
 async function apiRequest(method, path, body, options) {
-  const auth = await getAuthHeader();
-  const headers = {
-    Authorization: auth
-  };
+  const headers = {};
   if (options?.accept) {
     headers.Accept = options.accept;
   }
@@ -31174,9 +31171,19 @@ async function apiRequest(method, path, body, options) {
   const isRetryable = RETRYABLE_METHODS.has(method.toUpperCase());
   const requestBudgetMs = getRequestBudgetMs();
   return withConcurrencyLimit(async () => {
+    headers.Authorization = await getAuthHeader();
     let res;
     for (let attempt = 0; attempt <= MAX_429_RETRIES; attempt++) {
-      res = await executeFetch(method, url2, headers, fetchBody);
+      const remaining = requestBudgetMs - (Date.now() - startedAt);
+      if (remaining <= 0) {
+        return {
+          ok: false,
+          status: 0,
+          error: `Request budget of ${requestBudgetMs}ms exhausted before attempt could begin.`
+        };
+      }
+      const attemptTimeoutMs = Math.min(REQUEST_TIMEOUT_MS, remaining);
+      res = await executeFetch(method, url2, headers, fetchBody, attemptTimeoutMs);
       if (res.status !== 429 || attempt === MAX_429_RETRIES || !isRetryable) break;
       const delay = compute429DelayMs(res.headers.get("retry-after"), attempt);
       const elapsed2 = Date.now() - startedAt;
@@ -31363,7 +31370,11 @@ async function tailnetDevicesResource(uri) {
 }
 async function tailnetAclResource(uri) {
   const res = await apiGet(`/tailnet/${getTailnet()}/acl`, { acceptRaw: true, accept: "application/hujson" });
-  const text = res.ok ? res.rawBody ?? "" : `// Error: ${res.error ?? `HTTP ${res.status}`}
+  if (res.ok) {
+    return { contents: [{ uri: uri.href, text: res.rawBody ?? "", mimeType: "application/hujson" }] };
+  }
+  const lines = `Error: ${res.error ?? `HTTP ${res.status}`}`.split("\n");
+  const text = `${lines.map((l) => `// ${l}`).join("\n")}
 `;
   return { contents: [{ uri: uri.href, text, mimeType: "application/hujson" }] };
 }
@@ -32451,6 +32462,14 @@ var keyTools = [
         if (wrongFields.length > 0) {
           throw new Error(`${wrongFields.join(", ")} can only be used with keyType 'auth', not '${keyType}'`);
         }
+      } else {
+        const nonAuthFields = ["scopes", "issuer", "subject", "audience", "customClaimRules"];
+        const wrongFields = nonAuthFields.filter((f) => input[f] !== void 0);
+        if (wrongFields.length > 0) {
+          throw new Error(
+            `${wrongFields.join(", ")} cannot be used with keyType 'auth'. Set keyType to 'client' or 'federated'.`
+          );
+        }
       }
       const body = {};
       if (keyType !== "auth") body.keyType = keyType;
@@ -33448,7 +33467,7 @@ var webhookTools = [
 ];
 
 // src/index.ts
-var version2 = true ? "0.10.7" : (await null).createRequire(import.meta.url)("../package.json").version;
+var version2 = true ? "0.10.9" : (await null).createRequire(import.meta.url)("../package.json").version;
 var subcommand = process.argv[2];
 if (subcommand === "deploy-acl") {
   const filePath = process.argv[3];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yawlabs/tailscale-mcp",
-  "version": "0.10.7",
+  "version": "0.10.9",
   "description": "Tailscale MCP server for managing your tailnet from AI assistants",
   "license": "MIT",
   "author": "YawLabs <contact@yaw.sh>",