@yawlabs/tailscale-mcp 0.12.9 → 0.13.2

package/README.md

@@ -454,10 +454,47 @@ MCP Resources expose read-only data clients can browse without a tool call.
 For the simple "deploy ACL from git on merge" workflow, you don't need an MCP server or an agent — use the built-in CLI:
 
 ```bash
+# PR check: validate the proposed policy without touching the tailnet
+npx -y @yawlabs/tailscale-mcp@latest validate-acl tailscale/acl.json
+
+# On merge: ETag fetch + validate + deploy with If-Match, fail-closed at every step
 npx -y @yawlabs/tailscale-mcp@latest deploy-acl tailscale/acl.json
 ```
 
-Handles ETag fetching, validation, and deployment in one command. Works in any CI system. Set `TAILSCALE_API_KEY` and `TAILSCALE_TAILNET` as env vars.
+Works in any CI system. Set `TAILSCALE_API_KEY` and `TAILSCALE_TAILNET` as env vars. Both commands exit non-zero on any failure; `deploy-acl` refuses to deploy without an ETag (so a concurrent Admin Console edit can never be silently clobbered) and reports a 412 as a concurrent-edit conflict you resolve by re-running.
+
+A complete GitHub Actions workflow — validate on PR, deploy on merge:
+
+```yaml
+name: tailscale-acl
+on:
+  pull_request:
+    paths: ["tailscale/acl.json"]
+  push:
+    branches: [main]
+    paths: ["tailscale/acl.json"]
+
+jobs:
+  acl:
+    runs-on: ubuntu-latest
+    env:
+      TAILSCALE_API_KEY: ${{ secrets.TAILSCALE_API_KEY }}
+      TAILSCALE_TAILNET: your-tailnet.ts.net # or omit: defaults to the key's tailnet
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with: { node-version: 22 }
+      - name: Validate ACL
+        if: github.event_name == 'pull_request'
+        run: npx -y @yawlabs/tailscale-mcp@latest validate-acl tailscale/acl.json
+      - name: Deploy ACL
+        if: github.event_name == 'push'
+        run: npx -y @yawlabs/tailscale-mcp@latest deploy-acl tailscale/acl.json
+```
+
+For reproducible deploys, replace `@latest` with a pinned version.
+
+> **If you hand-roll this with `curl` instead:** Tailscale's ACL endpoint only returns the `ETag` header on **GET**, not HEAD. A `curl -I` (HEAD) ETag fetch silently yields an empty value — and an empty `If-Match` either deploys unguarded (clobbering concurrent edits) or trips your guard and fails the deploy. Fetch the ETag with a GET (`curl -fsS -D - -o /dev/null ...`), and fail the job if it comes back empty. The CLI above does all of this for you.
 
 **Optional:** Lock the Admin Console to prevent manual edits that drift from git. Ask your agent:
 

package/dist/index.js

@@ -6,7 +6,11 @@ var __getOwnPropNames = Object.getOwnPropertyNames;
 var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
 var __commonJS = (cb, mod) => function __require() {
-  return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;
+  try {
+    return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;
+  } catch (e) {
+    throw mod = 0, e;
+  }
 };
 var __export = (target, all) => {
   for (var name in all)
@@ -28506,11 +28510,11 @@ var Protocol = class {
    *
    * The Protocol object assumes ownership of the Transport, replacing any callbacks that have already been set, and expects that it is the only user of the Transport instance going forward.
    */
-  async connect(transport2) {
+  async connect(transport) {
     if (this._transport) {
       throw new Error("Already connected to a transport. Call close() before connecting to a new transport, or use a separate Protocol instance per connection.");
     }
-    this._transport = transport2;
+    this._transport = transport;
     const _onclose = this.transport?.onclose;
     this._transport.onclose = () => {
       _onclose?.();
@@ -30100,8 +30104,8 @@ var McpServer = class {
    *
    * The `server` object assumes ownership of the Transport, replacing any callbacks that have already been set, and expects that it is the only user of the Transport instance going forward.
    */
-  async connect(transport2) {
-    return await this.server.connect(transport2);
+  async connect(transport) {
+    return await this.server.connect(transport);
   }
   /**
    * Closes the connection.
@@ -31158,6 +31162,19 @@ async function executeFetch(method, url2, headers, body, timeoutMs) {
     signal: AbortSignal.timeout(timeoutMs)
   });
 }
+function describeTransportError(err, method, attemptTimeoutMs) {
+  if (err instanceof Error) {
+    if (err.name === "TimeoutError" || err.name === "AbortError") {
+      return `${method} request timed out after ${attemptTimeoutMs}ms`;
+    }
+    const cause = err.cause;
+    if (cause instanceof Error && cause.message) {
+      return `${method} request failed: ${err.message} (${cause.message})`;
+    }
+    return `${method} request failed: ${err.message}`;
+  }
+  return `${method} request failed: ${String(err)}`;
+}
 async function apiRequest(method, path, body, options) {
   const headers = {};
   if (options?.accept) {
@@ -31175,6 +31192,13 @@ async function apiRequest(method, path, body, options) {
     fetchBody = JSON.stringify(body);
   }
   const isAbsolute = path.startsWith("http://") || path.startsWith("https://");
+  if (isAbsolute && !path.startsWith("https://api.tailscale.com/")) {
+    return {
+      ok: false,
+      status: 0,
+      error: `Absolute URL ${JSON.stringify(path)} is not on api.tailscale.com -- refusing to send an authenticated request elsewhere.`
+    };
+  }
   const url2 = isAbsolute ? path : `${BASE_URL}${path}`;
   const startedAt = Date.now();
   debugLog(`${method} ${url2}`);
@@ -31183,17 +31207,38 @@ async function apiRequest(method, path, body, options) {
   return withConcurrencyLimit(async () => {
     headers.Authorization = await getAuthHeader();
     let res;
+    let lastTransportError;
     for (let attempt = 0; attempt <= MAX_429_RETRIES; attempt++) {
       const remaining = requestBudgetMs - (Date.now() - startedAt);
       if (remaining <= 0) {
         return {
           ok: false,
           status: 0,
-          error: `Request budget of ${requestBudgetMs}ms exhausted before attempt could begin.`
+          error: lastTransportError ? `${lastTransportError}; request budget of ${requestBudgetMs}ms exhausted before next attempt could begin.` : `Request budget of ${requestBudgetMs}ms exhausted before attempt could begin.`
         };
       }
       const attemptTimeoutMs = Math.min(REQUEST_TIMEOUT_MS, remaining);
-      res = await executeFetch(method, url2, headers, fetchBody, attemptTimeoutMs);
+      let attemptRes;
+      try {
+        attemptRes = await executeFetch(method, url2, headers, fetchBody, attemptTimeoutMs);
+      } catch (err) {
+        const desc = describeTransportError(err, method, attemptTimeoutMs);
+        lastTransportError = desc;
+        if (!isRetryable || attempt === MAX_429_RETRIES) {
+          return { ok: false, status: 0, error: desc };
+        }
+        const delay2 = compute429DelayMs(null, attempt);
+        const elapsed3 = Date.now() - startedAt;
+        if (requestBudgetMs - elapsed3 - delay2 <= 0) {
+          return { ok: false, status: 0, error: `${desc}; request budget exhausted before retry.` };
+        }
+        debugLog(
+          `  -> transport error (attempt ${attempt + 1}/${MAX_429_RETRIES + 1}): ${desc}, retrying in ${delay2}ms`
+        );
+        await new Promise((r) => setTimeout(r, delay2));
+        continue;
+      }
+      res = attemptRes;
       if (res.status !== 429 || attempt === MAX_429_RETRIES || !isRetryable) break;
       const delay = compute429DelayMs(res.headers.get("retry-after"), attempt);
       const elapsed2 = Date.now() - startedAt;
@@ -31210,24 +31255,33 @@ async function apiRequest(method, path, body, options) {
     const etag = response.headers.get("etag") || void 0;
     const elapsed = Date.now() - startedAt;
     debugLog(`  <- ${response.status} (${elapsed}ms)`);
-    if (options?.acceptRaw) {
-      const rawBody = await response.text();
+    try {
+      if (options?.acceptRaw) {
+        const rawBody = await response.text();
+        if (!response.ok) {
+          const error51 = response.status === 401 || response.status === 403 ? formatAuthError(response.status, rawBody) : extractErrorMessage(rawBody);
+          return { ok: false, status: response.status, error: error51, rawBody, etag };
+        }
+        return { ok: true, status: response.status, rawBody, etag };
+      }
       if (!response.ok) {
-        const error51 = response.status === 401 || response.status === 403 ? formatAuthError(response.status, rawBody) : extractErrorMessage(rawBody);
-        return { ok: false, status: response.status, error: error51, rawBody, etag };
+        const errorBody = await response.text();
+        const error51 = response.status === 401 || response.status === 403 ? formatAuthError(response.status, errorBody) : extractErrorMessage(errorBody);
+        return { ok: false, status: response.status, error: error51, etag };
       }
-      return { ok: true, status: response.status, rawBody, etag };
-    }
-    if (!response.ok) {
-      const errorBody = await response.text();
-      const error51 = response.status === 401 || response.status === 403 ? formatAuthError(response.status, errorBody) : extractErrorMessage(errorBody);
-      return { ok: false, status: response.status, error: error51, etag };
-    }
-    if (response.status === 204 || response.headers.get("content-length") === "0") {
-      return { ok: true, status: response.status, etag };
+      if (response.status === 204 || response.headers.get("content-length") === "0") {
+        return { ok: true, status: response.status, etag };
+      }
+      const data = await response.json();
+      return { ok: true, status: response.status, data, etag };
+    } catch (err) {
+      return {
+        ok: false,
+        status: response.status,
+        error: `Failed to read response body from ${method} ${url2} (HTTP ${response.status}): ${err instanceof Error ? err.message : String(err)}`,
+        etag
+      };
     }
-    const data = await response.json();
-    return { ok: true, status: response.status, data, etag };
   });
 }
 async function apiGet(path, options) {
@@ -31264,19 +31318,15 @@ function parseValidationError(rawBody) {
   if (typeof obj.error === "string" && obj.error.length > 0) return obj.error;
   return void 0;
 }
-async function deployAcl(filePath) {
-  let policy;
+function readPolicyFile(filePath) {
   try {
-    policy = readFileSync(filePath, "utf-8");
+    return readFileSync(filePath, "utf-8");
   } catch (err) {
     console.error(`Failed to read ${filePath}: ${err instanceof Error ? err.message : err}`);
     process.exit(1);
   }
-  const getRes = await apiGet(`/tailnet/${getTailnet()}/acl`, { acceptRaw: true, accept: "application/hujson" });
-  if (!getRes.ok || !getRes.etag) {
-    console.error(`Failed to get current ACL: ${getRes.error || "no ETag returned"}`);
-    process.exit(1);
-  }
+}
+async function validatePolicy(policy) {
   const validateRes = await apiPost(`/tailnet/${getTailnet()}/acl/validate`, void 0, {
     rawBody: policy,
     contentType: "application/hujson",
@@ -31292,6 +31342,20 @@ async function deployAcl(filePath) {
     console.error(`ACL validation failed: ${validationError}`);
     process.exit(1);
   }
+}
+async function validateAcl(filePath) {
+  const policy = readPolicyFile(filePath);
+  await validatePolicy(policy);
+  console.log("ACL policy is valid");
+}
+async function deployAcl(filePath) {
+  const policy = readPolicyFile(filePath);
+  const getRes = await apiGet(`/tailnet/${getTailnet()}/acl`, { acceptRaw: true, accept: "application/hujson" });
+  if (!getRes.ok || !getRes.etag) {
+    console.error(`Failed to get current ACL: ${getRes.error || "no ETag returned"}`);
+    process.exit(1);
+  }
+  await validatePolicy(policy);
   const deployRes = await apiPost(`/tailnet/${getTailnet()}/acl`, void 0, {
     rawBody: policy,
     contentType: "application/hujson",
@@ -31300,7 +31364,13 @@ async function deployAcl(filePath) {
     accept: "application/hujson"
   });
   if (!deployRes.ok) {
-    console.error(`ACL deploy failed: ${deployRes.error}`);
+    if (deployRes.status === 412) {
+      console.error(
+        `ACL deploy failed: the tailnet ACL changed between the ETag fetch and the deploy (concurrent edit). Re-run to retry against the current version. (${deployRes.error})`
+      );
+    } else {
+      console.error(`ACL deploy failed: ${deployRes.error}`);
+    }
     process.exit(1);
   }
   console.log("ACL deployed successfully");
@@ -31319,25 +31389,25 @@ function parseReadonlyFlag(value) {
 function filterTools(groups, options) {
   const validNames = new Set(Object.keys(groups));
   let profileGroups;
-  let unknownProfile2;
-  let profileWouldFilter2 = false;
+  let unknownProfile;
+  let profileWouldFilter = false;
   if (options.profile) {
     const profileKey = options.profile.trim().toLowerCase();
     if (Object.hasOwn(PROFILES, profileKey)) {
       const preset = PROFILES[profileKey];
-      profileWouldFilter2 = preset.length > 0;
-      profileGroups = profileWouldFilter2 ? [...preset] : void 0;
+      profileWouldFilter = preset.length > 0;
+      profileGroups = profileWouldFilter ? [...preset] : void 0;
     } else {
-      unknownProfile2 = profileKey;
+      unknownProfile = profileKey;
     }
   }
   const parsedTools = options.tools ? options.tools.split(",").map((s) => s.trim()).filter(Boolean) : null;
-  const explicitTools2 = parsedTools && parsedTools.length > 0 ? parsedTools : null;
-  const explicitToolsAllUnknown = explicitTools2?.every((g) => !validNames.has(g)) ?? false;
-  const effectiveExplicitTools = explicitToolsAllUnknown ? null : explicitTools2;
+  const explicitTools = parsedTools && parsedTools.length > 0 ? parsedTools : null;
+  const explicitToolsAllUnknown = explicitTools?.every((g) => !validNames.has(g)) ?? false;
+  const effectiveExplicitTools = explicitToolsAllUnknown ? null : explicitTools;
   const effectiveGroups = effectiveExplicitTools ?? profileGroups ?? null;
   const enabledGroups = effectiveGroups ? new Set(effectiveGroups) : null;
-  const unknownGroups2 = explicitTools2 ? explicitTools2.filter((g) => !validNames.has(g)) : enabledGroups ? [...enabledGroups].filter((g) => !validNames.has(g)) : [];
+  const unknownGroups = explicitTools ? explicitTools.filter((g) => !validNames.has(g)) : enabledGroups ? [...enabledGroups].filter((g) => !validNames.has(g)) : [];
   const readonly2 = parseReadonlyFlag(options.readonly);
   const out = [];
   for (const [name, tools] of Object.entries(groups)) {
@@ -31347,11 +31417,11 @@ function filterTools(groups, options) {
       out.push(t);
     }
   }
-  const result = { tools: out, unknownGroups: unknownGroups2 };
-  if (unknownProfile2) result.unknownProfile = unknownProfile2;
+  const result = { tools: out, unknownGroups };
+  if (unknownProfile) result.unknownProfile = unknownProfile;
   if (profileGroups && !effectiveExplicitTools) result.profileGroups = profileGroups;
   if (effectiveExplicitTools) result.explicitTools = effectiveExplicitTools;
-  if (profileWouldFilter2) result.profileWouldFilter = true;
+  if (profileWouldFilter) result.profileWouldFilter = true;
   if (explicitToolsAllUnknown) result.toolsAllUnknown = true;
   return result;
 }
@@ -31565,8 +31635,11 @@ var aclTools = [
         acceptRaw: true,
         accept: "application/hujson"
       });
-      if (res.ok && !res.rawBody?.trim()) {
-        return { ...res, rawBody: "ACL policy is valid." };
+      if (res.ok) {
+        const trimmed = res.rawBody?.trim();
+        if (!trimmed || trimmed === "{}") {
+          return { ...res, rawBody: "ACL policy is valid." };
+        }
       }
       return res;
     }
@@ -32516,7 +32589,7 @@ var keyTools = [
   },
   {
     name: "tailscale_create_key",
-    description: "Create a new key in your tailnet. Supports auth keys (for adding devices), OAuth clients (for programmatic API access), and federated identities (for OIDC-based CI/CD access). Returns the key value \u2014 save it immediately, as it cannot be retrieved again.\n\nExamples:\n- Auth key: {keyType:'auth', reusable:true, tags:['tag:ci']}\n- OAuth client: {keyType:'client', scopes:['devices:read','dns']}\n- Federated (GitHub Actions): {keyType:'federated', scopes:['devices:read'], issuer:'https://token.actions.githubusercontent.com', subject:'repo:my-org/my-repo:*'}",
+    description: "Create a new key in your tailnet. Supports auth keys (for adding devices), OAuth clients (for programmatic API access), and federated identities (for OIDC-based CI/CD access). Returns the key value \u2014 save it immediately, as it cannot be retrieved again.\n\nSECURITY: the response body contains a long-lived credential verbatim. MCP clients commonly persist tool responses to logs and conversation transcripts; treat this response as sensitive (do not commit it, avoid re-sharing it in unrelated chat history).\n\nExamples:\n- Auth key: {keyType:'auth', reusable:true, tags:['tag:ci']}\n- OAuth client: {keyType:'client', scopes:['devices:read','dns']}\n- Federated (GitHub Actions): {keyType:'federated', scopes:['devices:read'], issuer:'https://token.actions.githubusercontent.com', subject:'repo:my-org/my-repo:*'}",
     annotations: {
       title: "Create key",
       readOnlyHint: false,
@@ -32756,7 +32829,7 @@ var localCliTools = [
         "Target hostname, IP, or MagicDNS name (e.g. 'my-laptop', '100.64.0.1', 'my-laptop.tail-scale.ts.net')"
       ),
       count: external_exports.number().int().positive().max(20).optional().describe(
-        "Number of ping attempts (default 1, max 20). Higher counts give a better latency picture but block the tool call for longer."
+        "Number of ping attempts (max 20). If omitted, no -c flag is passed and the tailscale CLI uses its built-in default (retries until a direct path is found, typically <10 attempts). Higher explicit counts give a more complete latency picture but block the tool call for longer."
       )
     }),
     handler: async (input) => {
@@ -32866,7 +32939,9 @@ var logStreamingTools = [
       logType: external_exports.enum(["configuration", "network"]).describe("The log type: 'configuration' for audit logs, 'network' for network flow logs"),
       destinationType: external_exports.enum(["splunk", "elastic", "panther", "cribl", "datadog", "axiom", "s3"]).describe("The log streaming destination type"),
       url: external_exports.string().optional().describe("Destination URL (required for non-s3 destinations)"),
-      token: external_exports.string().optional().describe("Authentication token or API key for the destination"),
+      token: external_exports.string().optional().describe(
+        "Authentication token or API key for the destination. SENSITIVE: passed straight to Tailscale and not echoed back, but MCP clients may log the input value you supply."
+      ),
       user: external_exports.string().optional().describe("Username for the destination (if required)"),
       uploadPeriodMinutes: external_exports.number().int().positive().max(1440).optional().describe("Minutes to wait between uploads (1-1440). Optional."),
       compressionFormat: external_exports.enum(["zstd", "gzip", "none"]).optional().describe("Compression algorithm for log uploads. Defaults to 'none'."),
@@ -32877,7 +32952,9 @@ var logStreamingTools = [
         "(s3 only) Authentication mode. Required when destinationType is 's3'. Tailscale recommends 'rolearn'."
       ),
       s3AccessKeyId: external_exports.string().optional().describe("(s3 only) AWS access key id. Required when s3AuthenticationType is 'accesskey'."),
-      s3SecretAccessKey: external_exports.string().optional().describe("(s3 only) AWS secret access key. Required when s3AuthenticationType is 'accesskey'."),
+      s3SecretAccessKey: external_exports.string().optional().describe(
+        "(s3 only) AWS secret access key. Required when s3AuthenticationType is 'accesskey'. SENSITIVE: see the token field's note about MCP client logging."
+      ),
       s3RoleArn: external_exports.string().optional().describe(
         "(s3 only) IAM role ARN that Tailscale will assume. Required when s3AuthenticationType is 'rolearn'."
       )
@@ -33051,7 +33128,9 @@ var postureTools = [
       clientId: external_exports.string().optional().describe(
         "Client ID for the provider (Intune: application UUID; Falcon/Jamf Pro: client id; Kandji/Kolide/Sentinel One: leave blank)"
       ),
-      clientSecret: external_exports.string().describe("The secret (auth key, token, etc.) used to authenticate with the provider"),
+      clientSecret: external_exports.string().describe(
+        "The secret (auth key, token, etc.) used to authenticate with the provider. SENSITIVE: passed straight to Tailscale and not echoed back, but MCP clients may log the input value you supply."
+      ),
       tenantId: external_exports.string().optional().describe("Microsoft Intune directory (tenant) ID. Other providers leave blank."),
       cloudId: external_exports.string().optional().describe(
         "Identifies which of the provider's clouds to integrate with. Falcon: us-1|us-2|eu-1|us-gov; Intune: global|us-gov; Jamf Pro/Kandji/Sentinel One: FQDN of your subdomain; Kolide: leave blank."
@@ -33081,7 +33160,9 @@ var postureTools = [
     inputSchema: external_exports.object({
       integrationId: external_exports.string().describe("The posture integration ID to update"),
       clientId: external_exports.string().optional().describe("Updated client ID for the provider"),
-      clientSecret: external_exports.string().optional().describe("Updated client secret for the provider (omit to retain the existing secret)"),
+      clientSecret: external_exports.string().optional().describe(
+        "Updated client secret for the provider (omit to retain the existing secret). SENSITIVE: passed straight to Tailscale and not echoed back, but MCP clients may log the input value you supply."
+      ),
       tenantId: external_exports.string().optional().describe("Updated tenant ID"),
       cloudId: external_exports.string().optional().describe("Updated cloud identifier (e.g. 'us-1', 'global', or provider FQDN)")
     }),
@@ -33606,7 +33687,7 @@ var webhookTools = [
   },
   {
     name: "tailscale_create_webhook",
-    description: "Create a new webhook.",
+    description: "Create a new webhook. The response includes the webhook's signing secret -- this is the only opportunity to capture it; save it immediately.\n\nSECURITY: the response body contains the secret verbatim. MCP clients commonly persist tool responses to logs and conversation transcripts; treat this response as sensitive.",
     annotations: {
       title: "Create webhook",
       readOnlyHint: false,
@@ -33669,7 +33750,7 @@ var webhookTools = [
   },
   {
     name: "tailscale_rotate_webhook_secret",
-    description: "Rotate a webhook's secret. Returns the new secret \u2014 save it immediately, as it cannot be retrieved again. The old secret is immediately invalidated.",
+    description: "Rotate a webhook's secret. Returns the new secret \u2014 save it immediately, as it cannot be retrieved again. The old secret is immediately invalidated.\n\nSECURITY: the response body contains the secret verbatim. MCP clients commonly persist tool responses to logs and conversation transcripts; treat this response as sensitive.",
     annotations: {
       title: "Rotate webhook secret",
       readOnlyHint: false,
@@ -33706,125 +33787,133 @@ var webhookTools = [
 ];
 
 // src/index.ts
-var version2 = true ? "0.12.9" : resolveVersionFallback();
+var version2 = true ? "0.13.2" : resolveVersionFallback();
 var subcommand = process.argv[2];
-if (subcommand === "deploy-acl") {
+var cliSubcommandHandled = false;
+if (subcommand === "deploy-acl" || subcommand === "validate-acl") {
+  cliSubcommandHandled = true;
   const filePath = process.argv[3];
   if (!filePath) {
-    console.error("Usage: tailscale-mcp deploy-acl <path-to-acl.json>");
+    console.error(`Usage: tailscale-mcp ${subcommand} <path-to-acl.json>`);
     process.exit(1);
   }
-  await deployAcl(filePath).catch((err) => {
+  const run = subcommand === "deploy-acl" ? deployAcl : validateAcl;
+  run(filePath).then(() => process.exit(0)).catch((err) => {
     console.error(`Fatal: ${err instanceof Error ? err.message : err}`);
     process.exit(1);
   });
-  process.exit(0);
 } else if (subcommand === "version" || subcommand === "--version") {
   console.log(version2);
   process.exit(0);
 } else if (subcommand !== void 0) {
   console.error(
-    `@yawlabs/tailscale-mcp: unrecognized argument "${subcommand}" -- known subcommands: deploy-acl, version. Starting the MCP server.`
+    `@yawlabs/tailscale-mcp: unrecognized argument "${subcommand}" -- known subcommands: deploy-acl, validate-acl, version. Starting the MCP server.`
   );
 }
-var toolGroups = {
-  status: statusTools,
-  devices: deviceTools,
-  acl: aclTools,
-  dns: dnsTools,
-  keys: keyTools,
-  users: userTools,
-  tailnet: tailnetTools,
-  webhooks: webhookTools,
-  posture: postureTools,
-  audit: auditTools,
-  invites: inviteTools,
-  services: serviceTools,
-  "log-streaming": logStreamingTools
-};
-var localCliEnabled = isLocalCliEnabled(process.env);
-if (localCliEnabled) {
-  toolGroups["local-cli"] = localCliTools;
-}
-var {
-  tools: allTools,
-  unknownGroups,
-  unknownProfile,
-  explicitTools,
-  profileWouldFilter,
-  toolsAllUnknown
-} = filterTools(toolGroups, {
-  tools: process.env.TAILSCALE_TOOLS,
-  readonly: process.env.TAILSCALE_READONLY,
-  profile: process.env.TAILSCALE_PROFILE
-});
-if (unknownGroups.length > 0) {
-  const validNames = Object.keys(toolGroups);
-  const fallbackNote = toolsAllUnknown ? " Every requested group was unknown, so TAILSCALE_TOOLS was ignored and the default tool set was loaded instead." : "";
-  console.error(
-    `@yawlabs/tailscale-mcp: TAILSCALE_TOOLS includes unknown group(s): ${unknownGroups.join(", ")}. Valid groups: ${validNames.join(", ")}.${fallbackNote}`
+if (!cliSubcommandHandled) {
+  const toolGroups = {
+    status: statusTools,
+    devices: deviceTools,
+    acl: aclTools,
+    dns: dnsTools,
+    keys: keyTools,
+    users: userTools,
+    tailnet: tailnetTools,
+    webhooks: webhookTools,
+    posture: postureTools,
+    audit: auditTools,
+    invites: inviteTools,
+    services: serviceTools,
+    "log-streaming": logStreamingTools
+  };
+  const localCliEnabled = isLocalCliEnabled(process.env);
+  if (localCliEnabled) {
+    toolGroups["local-cli"] = localCliTools;
+  }
+  const {
+    tools: allTools,
+    unknownGroups,
+    unknownProfile,
+    explicitTools,
+    profileWouldFilter,
+    toolsAllUnknown
+  } = filterTools(toolGroups, {
+    tools: process.env.TAILSCALE_TOOLS,
+    readonly: process.env.TAILSCALE_READONLY,
+    profile: process.env.TAILSCALE_PROFILE
+  });
+  if (unknownGroups.length > 0) {
+    const validNames = Object.keys(toolGroups);
+    const fallbackNote = toolsAllUnknown ? " Every requested group was unknown, so TAILSCALE_TOOLS was ignored and the default tool set was loaded instead." : "";
+    console.error(
+      `@yawlabs/tailscale-mcp: TAILSCALE_TOOLS includes unknown group(s): ${unknownGroups.join(", ")}. Valid groups: ${validNames.join(", ")}.${fallbackNote}`
+    );
+  }
+  if (unknownProfile) {
+    console.error(
+      `@yawlabs/tailscale-mcp: TAILSCALE_PROFILE="${unknownProfile}" is not a known profile. Valid profiles: minimal, core, full. Falling back to no profile filter.`
+    );
+  }
+  const server = new McpServer({
+    name: "@yawlabs/tailscale-mcp",
+    version: version2
+  });
+  for (const tool of allTools) {
+    server.tool(tool.name, tool.description, tool.inputSchema.shape, tool.annotations, wrapToolHandler(tool));
+  }
+  server.resource(
+    "tailnet-status",
+    "tailscale://tailnet/status",
+    { description: "Current tailnet status including device count and settings", mimeType: "application/json" },
+    tailnetStatusResource
   );
-}
-if (unknownProfile) {
-  console.error(
-    `@yawlabs/tailscale-mcp: TAILSCALE_PROFILE="${unknownProfile}" is not a known profile. Valid profiles: minimal, core, full. Falling back to no profile filter.`
+  server.resource(
+    "tailnet-devices",
+    "tailscale://tailnet/devices",
+    { description: "List of all devices in the tailnet with their status", mimeType: "application/json" },
+    tailnetDevicesResource
   );
-}
-var server = new McpServer({
-  name: "@yawlabs/tailscale-mcp",
-  version: version2
-});
-for (const tool of allTools) {
-  server.tool(tool.name, tool.description, tool.inputSchema.shape, tool.annotations, wrapToolHandler(tool));
-}
-server.resource(
-  "tailnet-status",
-  "tailscale://tailnet/status",
-  { description: "Current tailnet status including device count and settings", mimeType: "application/json" },
-  tailnetStatusResource
-);
-server.resource(
-  "tailnet-devices",
-  "tailscale://tailnet/devices",
-  { description: "List of all devices in the tailnet with their status", mimeType: "application/json" },
-  tailnetDevicesResource
-);
-server.resource(
-  "tailnet-acl",
-  "tailscale://tailnet/acl",
-  { description: "Current ACL policy (HuJSON with comments preserved)", mimeType: "application/hujson" },
-  tailnetAclResource
-);
-server.resource(
-  "tailnet-dns",
-  "tailscale://tailnet/dns",
-  {
-    description: "DNS configuration including nameservers, search paths, split DNS, and MagicDNS status",
-    mimeType: "application/json"
-  },
-  tailnetDnsResource
-);
-var transport = new StdioServerTransport();
-await server.connect(transport);
-var readonlyMode = parseReadonlyFlag(process.env.TAILSCALE_READONLY);
-var filterSuffix = formatBannerFilterSuffix({
-  unknownProfile,
-  explicitTools,
-  profileWouldFilter,
-  profileEnv: process.env.TAILSCALE_PROFILE,
-  readonlyMode,
-  localCliEnabled
-});
-console.error(
-  `@yawlabs/tailscale-mcp v${version2} ready (${allTools.length} tools${filterSuffix ? `, ${filterSuffix}` : ""})`
-);
-var hasCreds = !!process.env.TAILSCALE_API_KEY || !!process.env.TAILSCALE_OAUTH_CLIENT_ID && !!process.env.TAILSCALE_OAUTH_CLIENT_SECRET;
-if (!filterSuffix && hasCreds) {
-  const profileCount = (groups) => groups.reduce((n, g) => n + (toolGroups[g]?.length ?? 0), 0);
-  const coreCount = profileCount(PROFILES.core);
-  const minimalCount = profileCount(PROFILES.minimal);
+  server.resource(
+    "tailnet-acl",
+    "tailscale://tailnet/acl",
+    { description: "Current ACL policy (HuJSON with comments preserved)", mimeType: "application/hujson" },
+    tailnetAclResource
+  );
+  server.resource(
+    "tailnet-dns",
+    "tailscale://tailnet/dns",
+    {
+      description: "DNS configuration including nameservers, search paths, split DNS, and MagicDNS status",
+      mimeType: "application/json"
+    },
+    tailnetDnsResource
+  );
+  const transport = new StdioServerTransport();
+  server.connect(transport).catch((err) => {
+    process.stderr.write(`tailscale-mcp: ${err instanceof Error ? err.message : String(err)}
+`);
+    process.exit(1);
+  });
+  const readonlyMode = parseReadonlyFlag(process.env.TAILSCALE_READONLY);
+  const filterSuffix = formatBannerFilterSuffix({
+    unknownProfile,
+    explicitTools,
+    profileWouldFilter,
+    profileEnv: process.env.TAILSCALE_PROFILE,
+    readonlyMode,
+    localCliEnabled
+  });
   console.error(
-    `@yawlabs/tailscale-mcp: tip \u2014 set TAILSCALE_PROFILE=core (${coreCount} tools) or =minimal (${minimalCount}) to load a smaller tool surface. See README.`
+    `@yawlabs/tailscale-mcp v${version2} ready (${allTools.length} tools${filterSuffix ? `, ${filterSuffix}` : ""})`
   );
+  const hasCreds = !!process.env.TAILSCALE_API_KEY || !!process.env.TAILSCALE_OAUTH_CLIENT_ID && !!process.env.TAILSCALE_OAUTH_CLIENT_SECRET;
+  if (!filterSuffix && hasCreds) {
+    const profileCount = (groups) => groups.reduce((n, g) => n + (toolGroups[g]?.length ?? 0), 0);
+    const coreCount = profileCount(PROFILES.core);
+    const minimalCount = profileCount(PROFILES.minimal);
+    console.error(
+      `@yawlabs/tailscale-mcp: tip \u2014 set TAILSCALE_PROFILE=core (${coreCount} tools) or =minimal (${minimalCount}) to load a smaller tool surface. See README.`
+    );
+  }
 }
 //# sourceMappingURL=index.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yawlabs/tailscale-mcp",
-  "version": "0.12.9",
+  "version": "0.13.2",
   "mcpName": "io.github.YawLabs/tailscale-mcp",
   "description": "Tailscale MCP server for managing your tailnet from AI assistants",
   "license": "MIT",
@@ -38,7 +38,6 @@
     "lint:fix": "biome check --write src/",
     "prepublishOnly": "npm run clean && npm run build"
   },
-  "dependencies": {},
   "overrides": {
     "hono": "^4.12.21",
     "@hono/node-server": "^1.19.13",
@@ -50,7 +49,8 @@
     "@biomejs/biome": "^2.4.12",
     "@modelcontextprotocol/sdk": "^1.29.0",
     "@types/node": "^25.6.0",
-    "esbuild": "^0.28.0",
+    "esbuild": "^0.28.1",
+    "postject": "^1.0.0-alpha.6",
     "typescript": "^6.0.3",
     "zod": "^4.3.6"
   },