@yawlabs/tailscale-mcp 0.2.1 → 0.4.0

package/dist/tools/users.d.ts

@@ -1,118 +0,0 @@
-import { z } from "zod";
-export declare const userTools: readonly [{
-    readonly name: "tailscale_list_users";
-    readonly description: "List all users in your tailnet.";
-    readonly annotations: {
-        readonly title: "List users";
-        readonly readOnlyHint: true;
-        readonly destructiveHint: false;
-        readonly idempotentHint: true;
-        readonly openWorldHint: true;
-    };
-    readonly inputSchema: z.ZodObject<{}, "strip", z.ZodTypeAny, {}, {}>;
-    readonly handler: () => Promise<import("../api.js").ApiResponse<unknown>>;
-}, {
-    readonly name: "tailscale_get_user";
-    readonly description: "Get details for a specific user.";
-    readonly annotations: {
-        readonly title: "Get user";
-        readonly readOnlyHint: true;
-        readonly destructiveHint: false;
-        readonly idempotentHint: true;
-        readonly openWorldHint: true;
-    };
-    readonly inputSchema: z.ZodObject<{
-        userId: z.ZodString;
-    }, "strip", z.ZodTypeAny, {
-        userId: string;
-    }, {
-        userId: string;
-    }>;
-    readonly handler: (input: {
-        userId: string;
-    }) => Promise<import("../api.js").ApiResponse<unknown>>;
-}, {
-    readonly name: "tailscale_approve_user";
-    readonly description: "Approve a pending user, granting them access to the tailnet.";
-    readonly annotations: {
-        readonly title: "Approve user";
-        readonly readOnlyHint: false;
-        readonly destructiveHint: false;
-        readonly idempotentHint: true;
-        readonly openWorldHint: true;
-    };
-    readonly inputSchema: z.ZodObject<{
-        userId: z.ZodString;
-    }, "strip", z.ZodTypeAny, {
-        userId: string;
-    }, {
-        userId: string;
-    }>;
-    readonly handler: (input: {
-        userId: string;
-    }) => Promise<import("../api.js").ApiResponse<unknown>>;
-}, {
-    readonly name: "tailscale_suspend_user";
-    readonly description: "Suspend a user, immediately revoking their access to the tailnet. Their devices will be disconnected. Can be reversed with tailscale_restore_user.";
-    readonly annotations: {
-        readonly title: "Suspend user";
-        readonly readOnlyHint: false;
-        readonly destructiveHint: true;
-        readonly idempotentHint: true;
-        readonly openWorldHint: true;
-    };
-    readonly inputSchema: z.ZodObject<{
-        userId: z.ZodString;
-    }, "strip", z.ZodTypeAny, {
-        userId: string;
-    }, {
-        userId: string;
-    }>;
-    readonly handler: (input: {
-        userId: string;
-    }) => Promise<import("../api.js").ApiResponse<unknown>>;
-}, {
-    readonly name: "tailscale_restore_user";
-    readonly description: "Restore a previously suspended user, re-granting them access to the tailnet.";
-    readonly annotations: {
-        readonly title: "Restore user";
-        readonly readOnlyHint: false;
-        readonly destructiveHint: false;
-        readonly idempotentHint: true;
-        readonly openWorldHint: true;
-    };
-    readonly inputSchema: z.ZodObject<{
-        userId: z.ZodString;
-    }, "strip", z.ZodTypeAny, {
-        userId: string;
-    }, {
-        userId: string;
-    }>;
-    readonly handler: (input: {
-        userId: string;
-    }) => Promise<import("../api.js").ApiResponse<unknown>>;
-}, {
-    readonly name: "tailscale_update_user_role";
-    readonly description: "Update a user's role in the tailnet.";
-    readonly annotations: {
-        readonly title: "Update user role";
-        readonly readOnlyHint: false;
-        readonly destructiveHint: false;
-        readonly idempotentHint: true;
-        readonly openWorldHint: true;
-    };
-    readonly inputSchema: z.ZodObject<{
-        userId: z.ZodString;
-        role: z.ZodEnum<["owner", "admin", "it-admin", "network-admin", "billing-admin", "auditor", "member"]>;
-    }, "strip", z.ZodTypeAny, {
-        userId: string;
-        role: "owner" | "admin" | "it-admin" | "network-admin" | "billing-admin" | "auditor" | "member";
-    }, {
-        userId: string;
-        role: "owner" | "admin" | "it-admin" | "network-admin" | "billing-admin" | "auditor" | "member";
-    }>;
-    readonly handler: (input: {
-        userId: string;
-        role: string;
-    }) => Promise<import("../api.js").ApiResponse<unknown>>;
-}];

package/dist/tools/users.js

@@ -1,108 +0,0 @@
-import { z } from "zod";
-import { apiGet, apiPatch, apiPost, encPath, getTailnet } from "../api.js";
-export const userTools = [
-    {
-        name: "tailscale_list_users",
-        description: "List all users in your tailnet.",
-        annotations: {
-            title: "List users",
-            readOnlyHint: true,
-            destructiveHint: false,
-            idempotentHint: true,
-            openWorldHint: true,
-        },
-        inputSchema: z.object({}),
-        handler: async () => {
-            return apiGet(`/tailnet/${getTailnet()}/users`);
-        },
-    },
-    {
-        name: "tailscale_get_user",
-        description: "Get details for a specific user.",
-        annotations: {
-            title: "Get user",
-            readOnlyHint: true,
-            destructiveHint: false,
-            idempotentHint: true,
-            openWorldHint: true,
-        },
-        inputSchema: z.object({
-            userId: z.string().describe("The user ID"),
-        }),
-        handler: async (input) => {
-            return apiGet(`/users/${encPath(input.userId)}`);
-        },
-    },
-    {
-        name: "tailscale_approve_user",
-        description: "Approve a pending user, granting them access to the tailnet.",
-        annotations: {
-            title: "Approve user",
-            readOnlyHint: false,
-            destructiveHint: false,
-            idempotentHint: true,
-            openWorldHint: true,
-        },
-        inputSchema: z.object({
-            userId: z.string().describe("The user ID to approve"),
-        }),
-        handler: async (input) => {
-            return apiPost(`/users/${encPath(input.userId)}/approve`);
-        },
-    },
-    {
-        name: "tailscale_suspend_user",
-        description: "Suspend a user, immediately revoking their access to the tailnet. Their devices will be disconnected. Can be reversed with tailscale_restore_user.",
-        annotations: {
-            title: "Suspend user",
-            readOnlyHint: false,
-            destructiveHint: true,
-            idempotentHint: true,
-            openWorldHint: true,
-        },
-        inputSchema: z.object({
-            userId: z.string().describe("The user ID to suspend"),
-        }),
-        handler: async (input) => {
-            return apiPost(`/users/${encPath(input.userId)}/suspend`);
-        },
-    },
-    {
-        name: "tailscale_restore_user",
-        description: "Restore a previously suspended user, re-granting them access to the tailnet.",
-        annotations: {
-            title: "Restore user",
-            readOnlyHint: false,
-            destructiveHint: false,
-            idempotentHint: true,
-            openWorldHint: true,
-        },
-        inputSchema: z.object({
-            userId: z.string().describe("The user ID to restore"),
-        }),
-        handler: async (input) => {
-            return apiPost(`/users/${encPath(input.userId)}/restore`);
-        },
-    },
-    {
-        name: "tailscale_update_user_role",
-        description: "Update a user's role in the tailnet.",
-        annotations: {
-            title: "Update user role",
-            readOnlyHint: false,
-            destructiveHint: false,
-            idempotentHint: true,
-            openWorldHint: true,
-        },
-        inputSchema: z.object({
-            userId: z.string().describe("The user ID"),
-            role: z
-                .enum(["owner", "admin", "it-admin", "network-admin", "billing-admin", "auditor", "member"])
-                .describe("The new role to assign"),
-        }),
-        handler: async (input) => {
-            return apiPatch(`/users/${encPath(input.userId)}/role`, { role: input.role });
-        },
-    },
-];
-//# sourceMappingURL=users.js.map

package/dist/tools/users.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"users.js","sourceRoot":"","sources":["../../src/tools/users.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAE3E,MAAM,CAAC,MAAM,SAAS,GAAG;IACvB;QACE,IAAI,EAAE,sBAAsB;QAC5B,WAAW,EAAE,iCAAiC;QAC9C,WAAW,EAAE;YACX,KAAK,EAAE,YAAY;YACnB,YAAY,EAAE,IAAI;YAClB,eAAe,EAAE,KAAK;YACtB,cAAc,EAAE,IAAI;YACpB,aAAa,EAAE,IAAI;SACpB;QACD,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,KAAK,IAAI,EAAE;YAClB,OAAO,MAAM,CAAC,YAAY,UAAU,EAAE,QAAQ,CAAC,CAAC;QAClD,CAAC;KACF;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EAAE,kCAAkC;QAC/C,WAAW,EAAE;YACX,KAAK,EAAE,UAAU;YACjB,YAAY,EAAE,IAAI;YAClB,eAAe,EAAE,KAAK;YACtB,cAAc,EAAE,IAAI;YACpB,aAAa,EAAE,IAAI;SACpB;QACD,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC;SAC3C,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,KAAyB,EAAE,EAAE;YAC3C,OAAO,MAAM,CAAC,UAAU,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACnD,CAAC;KACF;IACD;QACE,IAAI,EAAE,wBAAwB;QAC9B,WAAW,EAAE,8DAA8D;QAC3E,WAAW,EAAE;YACX,KAAK,EAAE,cAAc;YACrB,YAAY,EAAE,KAAK;YACnB,eAAe,EAAE,KAAK;YACtB,cAAc,EAAE,IAAI;YACpB,aAAa,EAAE,IAAI;SACpB;QACD,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC;SACtD,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,KAAyB,EAAE,EAAE;YAC3C,OAAO,OAAO,CAAC,UAAU,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC5D,CAAC;KACF;IACD;QACE,IAAI,EAAE,wBAAwB;QAC9B,WAAW,EACT,oJAAoJ;QACtJ,WAAW,EAAE;YACX,KAAK,EAAE,cAAc;YACrB,YAAY,EAAE,KAAK;YACnB,eAAe,EAAE,IAAI;YACrB,cAAc,EAAE,IAAI;YACpB,aAAa,EAAE,IAAI;SACpB;QACD,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC;SACtD,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,KAAyB,EAAE,EAAE;YAC3C,OAAO,OAAO,CAAC,UAAU,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC5D,CAAC;KACF;IACD;QACE,IAAI,EAAE,wBAAwB;QAC9B,WAAW,EAAE,8EAA8E;QAC3F,WAAW,EAAE;YACX,KAAK,EAAE,cAAc;YACrB,YAAY,EAAE,KAAK;YACnB,eAAe,EAAE,KAAK;YACtB,cAAc,EAAE,IAAI;YACpB,aAAa,EAAE,IAAI;SACpB;QACD,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC;SACtD,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,KAAyB,EAAE,EAAE;YAC3C,OAAO,OAAO,CAAC,UAAU,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC5D,CAAC;KACF;IACD;QACE,IAAI,EAAE,4BAA4B;QAClC,WAAW,EAAE,sCAAsC;QACnD,WAAW,EAAE;YACX,KAAK,EAAE,kBAAkB;YACzB,YAAY,EAAE,KAAK;YACnB,eAAe,EAAE,KAAK;YACtB,cAAc,EAAE,IAAI;YACpB,aAAa,EAAE,IAAI;SACpB;QACD,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC;YAC1C,IAAI,EAAE,CAAC;iBACJ,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,eAAe,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;iBAC3F,QAAQ,CAAC,wBAAwB,CAAC;SACtC,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,KAAuC,EAAE,EAAE;YACzD,OAAO,QAAQ,CAAC,UAAU,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QAChF,CAAC;KACF;CACO,CAAC"}

package/dist/tools/webhooks.d.ts

@@ -1,126 +0,0 @@
-import { z } from "zod";
-export declare const webhookTools: readonly [{
-    readonly name: "tailscale_list_webhooks";
-    readonly description: "List all webhooks configured for your tailnet.";
-    readonly annotations: {
-        readonly title: "List webhooks";
-        readonly readOnlyHint: true;
-        readonly destructiveHint: false;
-        readonly idempotentHint: true;
-        readonly openWorldHint: true;
-    };
-    readonly inputSchema: z.ZodObject<{}, "strip", z.ZodTypeAny, {}, {}>;
-    readonly handler: () => Promise<import("../api.js").ApiResponse<unknown>>;
-}, {
-    readonly name: "tailscale_get_webhook";
-    readonly description: "Get details for a specific webhook.";
-    readonly annotations: {
-        readonly title: "Get webhook";
-        readonly readOnlyHint: true;
-        readonly destructiveHint: false;
-        readonly idempotentHint: true;
-        readonly openWorldHint: true;
-    };
-    readonly inputSchema: z.ZodObject<{
-        webhookId: z.ZodString;
-    }, "strip", z.ZodTypeAny, {
-        webhookId: string;
-    }, {
-        webhookId: string;
-    }>;
-    readonly handler: (input: {
-        webhookId: string;
-    }) => Promise<import("../api.js").ApiResponse<unknown>>;
-}, {
-    readonly name: "tailscale_create_webhook";
-    readonly description: "Create a new webhook.";
-    readonly annotations: {
-        readonly title: "Create webhook";
-        readonly readOnlyHint: false;
-        readonly destructiveHint: false;
-        readonly idempotentHint: false;
-        readonly openWorldHint: true;
-    };
-    readonly inputSchema: z.ZodObject<{
-        endpointUrl: z.ZodString;
-        subscriptions: z.ZodArray<z.ZodString, "many">;
-    }, "strip", z.ZodTypeAny, {
-        endpointUrl: string;
-        subscriptions: string[];
-    }, {
-        endpointUrl: string;
-        subscriptions: string[];
-    }>;
-    readonly handler: (input: {
-        endpointUrl: string;
-        subscriptions: string[];
-    }) => Promise<import("../api.js").ApiResponse<unknown>>;
-}, {
-    readonly name: "tailscale_update_webhook";
-    readonly description: "Update an existing webhook's endpoint URL and/or subscriptions.";
-    readonly annotations: {
-        readonly title: "Update webhook";
-        readonly readOnlyHint: false;
-        readonly destructiveHint: false;
-        readonly idempotentHint: true;
-        readonly openWorldHint: true;
-    };
-    readonly inputSchema: z.ZodObject<{
-        webhookId: z.ZodString;
-        endpointUrl: z.ZodOptional<z.ZodString>;
-        subscriptions: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-    }, "strip", z.ZodTypeAny, {
-        webhookId: string;
-        endpointUrl?: string | undefined;
-        subscriptions?: string[] | undefined;
-    }, {
-        webhookId: string;
-        endpointUrl?: string | undefined;
-        subscriptions?: string[] | undefined;
-    }>;
-    readonly handler: (input: {
-        webhookId: string;
-        endpointUrl?: string;
-        subscriptions?: string[];
-    }) => Promise<import("../api.js").ApiResponse<unknown>>;
-}, {
-    readonly name: "tailscale_delete_webhook";
-    readonly description: "Delete a webhook. This is irreversible — the webhook secret cannot be recovered.";
-    readonly annotations: {
-        readonly title: "Delete webhook";
-        readonly readOnlyHint: false;
-        readonly destructiveHint: true;
-        readonly idempotentHint: true;
-        readonly openWorldHint: true;
-    };
-    readonly inputSchema: z.ZodObject<{
-        webhookId: z.ZodString;
-    }, "strip", z.ZodTypeAny, {
-        webhookId: string;
-    }, {
-        webhookId: string;
-    }>;
-    readonly handler: (input: {
-        webhookId: string;
-    }) => Promise<import("../api.js").ApiResponse<unknown>>;
-}, {
-    readonly name: "tailscale_rotate_webhook_secret";
-    readonly description: "Rotate a webhook's secret. Returns the new secret — save it immediately, as it cannot be retrieved again. The old secret is immediately invalidated.";
-    readonly annotations: {
-        readonly title: "Rotate webhook secret";
-        readonly readOnlyHint: false;
-        readonly destructiveHint: false;
-        readonly idempotentHint: false;
-        readonly openWorldHint: true;
-    };
-    readonly inputSchema: z.ZodObject<{
-        webhookId: z.ZodString;
-    }, "strip", z.ZodTypeAny, {
-        webhookId: string;
-    }, {
-        webhookId: string;
-    }>;
-    readonly handler: (input: {
-        webhookId: string;
-    }) => Promise<import("../api.js").ApiResponse<unknown>>;
-}];

package/dist/tools/webhooks.js

@@ -1,121 +0,0 @@
-import { z } from "zod";
-import { apiDelete, apiGet, apiPatch, apiPost, encPath, getTailnet } from "../api.js";
-export const webhookTools = [
-    {
-        name: "tailscale_list_webhooks",
-        description: "List all webhooks configured for your tailnet.",
-        annotations: {
-            title: "List webhooks",
-            readOnlyHint: true,
-            destructiveHint: false,
-            idempotentHint: true,
-            openWorldHint: true,
-        },
-        inputSchema: z.object({}),
-        handler: async () => {
-            return apiGet(`/tailnet/${getTailnet()}/webhooks`);
-        },
-    },
-    {
-        name: "tailscale_get_webhook",
-        description: "Get details for a specific webhook.",
-        annotations: {
-            title: "Get webhook",
-            readOnlyHint: true,
-            destructiveHint: false,
-            idempotentHint: true,
-            openWorldHint: true,
-        },
-        inputSchema: z.object({
-            webhookId: z.string().describe("The webhook ID"),
-        }),
-        handler: async (input) => {
-            return apiGet(`/webhooks/${encPath(input.webhookId)}`);
-        },
-    },
-    {
-        name: "tailscale_create_webhook",
-        description: "Create a new webhook.",
-        annotations: {
-            title: "Create webhook",
-            readOnlyHint: false,
-            destructiveHint: false,
-            idempotentHint: false,
-            openWorldHint: true,
-        },
-        inputSchema: z.object({
-            endpointUrl: z.string().describe("The URL to send webhook events to"),
-            subscriptions: z
-                .array(z.string())
-                .describe("Event types to subscribe to (e.g. ['nodeCreated', 'nodeDeleted', 'nodeApproved', 'policyUpdate', 'userCreated', 'userDeleted'])"),
-        }),
-        handler: async (input) => {
-            return apiPost(`/tailnet/${getTailnet()}/webhooks`, {
-                endpointUrl: input.endpointUrl,
-                subscriptions: input.subscriptions,
-            });
-        },
-    },
-    {
-        name: "tailscale_update_webhook",
-        description: "Update an existing webhook's endpoint URL and/or subscriptions.",
-        annotations: {
-            title: "Update webhook",
-            readOnlyHint: false,
-            destructiveHint: false,
-            idempotentHint: true,
-            openWorldHint: true,
-        },
-        inputSchema: z.object({
-            webhookId: z.string().describe("The webhook ID to update"),
-            endpointUrl: z.string().optional().describe("New URL to send webhook events to"),
-            subscriptions: z
-                .array(z.string())
-                .optional()
-                .describe("Updated list of event types to subscribe to (e.g. ['nodeCreated', 'nodeDeleted', 'nodeApproved', 'policyUpdate', 'userCreated', 'userDeleted'])"),
-        }),
-        handler: async (input) => {
-            const body = {};
-            if (input.endpointUrl !== undefined)
-                body.endpointUrl = input.endpointUrl;
-            if (input.subscriptions !== undefined)
-                body.subscriptions = input.subscriptions;
-            return apiPatch(`/webhooks/${encPath(input.webhookId)}`, body);
-        },
-    },
-    {
-        name: "tailscale_delete_webhook",
-        description: "Delete a webhook. This is irreversible — the webhook secret cannot be recovered.",
-        annotations: {
-            title: "Delete webhook",
-            readOnlyHint: false,
-            destructiveHint: true,
-            idempotentHint: true,
-            openWorldHint: true,
-        },
-        inputSchema: z.object({
-            webhookId: z.string().describe("The webhook ID to delete"),
-        }),
-        handler: async (input) => {
-            return apiDelete(`/webhooks/${encPath(input.webhookId)}`);
-        },
-    },
-    {
-        name: "tailscale_rotate_webhook_secret",
-        description: "Rotate a webhook's secret. Returns the new secret — save it immediately, as it cannot be retrieved again. The old secret is immediately invalidated.",
-        annotations: {
-            title: "Rotate webhook secret",
-            readOnlyHint: false,
-            destructiveHint: false,
-            idempotentHint: false,
-            openWorldHint: true,
-        },
-        inputSchema: z.object({
-            webhookId: z.string().describe("The webhook ID whose secret to rotate"),
-        }),
-        handler: async (input) => {
-            return apiPost(`/webhooks/${encPath(input.webhookId)}/rotate`);
-        },
-    },
-];
-//# sourceMappingURL=webhooks.js.map

package/dist/tools/webhooks.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"webhooks.js","sourceRoot":"","sources":["../../src/tools/webhooks.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAEtF,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B;QACE,IAAI,EAAE,yBAAyB;QAC/B,WAAW,EAAE,gDAAgD;QAC7D,WAAW,EAAE;YACX,KAAK,EAAE,eAAe;YACtB,YAAY,EAAE,IAAI;YAClB,eAAe,EAAE,KAAK;YACtB,cAAc,EAAE,IAAI;YACpB,aAAa,EAAE,IAAI;SACpB;QACD,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,KAAK,IAAI,EAAE;YAClB,OAAO,MAAM,CAAC,YAAY,UAAU,EAAE,WAAW,CAAC,CAAC;QACrD,CAAC;KACF;IACD;QACE,IAAI,EAAE,uBAAuB;QAC7B,WAAW,EAAE,qCAAqC;QAClD,WAAW,EAAE;YACX,KAAK,EAAE,aAAa;YACpB,YAAY,EAAE,IAAI;YAClB,eAAe,EAAE,KAAK;YACtB,cAAc,EAAE,IAAI;YACpB,aAAa,EAAE,IAAI;SACpB;QACD,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,gBAAgB,CAAC;SACjD,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,KAA4B,EAAE,EAAE;YAC9C,OAAO,MAAM,CAAC,aAAa,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACzD,CAAC;KACF;IACD;QACE,IAAI,EAAE,0BAA0B;QAChC,WAAW,EAAE,uBAAuB;QACpC,WAAW,EAAE;YACX,KAAK,EAAE,gBAAgB;YACvB,YAAY,EAAE,KAAK;YACnB,eAAe,EAAE,KAAK;YACtB,cAAc,EAAE,KAAK;YACrB,aAAa,EAAE,IAAI;SACpB;QACD,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC;YACrE,aAAa,EAAE,CAAC;iBACb,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;iBACjB,QAAQ,CACP,iIAAiI,CAClI;SACJ,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,KAAuD,EAAE,EAAE;YACzE,OAAO,OAAO,CAAC,YAAY,UAAU,EAAE,WAAW,EAAE;gBAClD,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,aAAa,EAAE,KAAK,CAAC,aAAa;aACnC,CAAC,CAAC;QACL,CAAC;KACF;IACD;QACE,IAAI,EAAE,0BAA0B;QAChC,WAAW,EAAE,iEAAiE;QAC9E,WAAW,EAAE;YACX,KAAK,EAAE,gBAAgB;YACvB,YAAY,EAAE,KAAK;YACnB,eAAe,EAAE,KAAK;YACtB,cAAc,EAAE,IAAI;YACpB,aAAa,EAAE,IAAI;SACpB;QACD,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC;YAC1D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC;YAChF,aAAa,EAAE,CAAC;iBACb,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;iBACjB,QAAQ,EAAE;iBACV,QAAQ,CACP,iJAAiJ,CAClJ;SACJ,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,KAA4E,EAAE,EAAE;YAC9F,MAAM,IAAI,GAA4B,EAAE,CAAC;YACzC,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS;gBAAE,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;YAC1E,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS;gBAAE,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC,aAAa,CAAC;YAChF,OAAO,QAAQ,CAAC,aAAa,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACjE,CAAC;KACF;IACD;QACE,IAAI,EAAE,0BAA0B;QAChC,WAAW,EAAE,kFAAkF;QAC/F,WAAW,EAAE;YACX,KAAK,EAAE,gBAAgB;YACvB,YAAY,EAAE,KAAK;YACnB,eAAe,EAAE,IAAI;YACrB,cAAc,EAAE,IAAI;YACpB,aAAa,EAAE,IAAI;SACpB;QACD,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC;SAC3D,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,KAA4B,EAAE,EAAE;YAC9C,OAAO,SAAS,CAAC,aAAa,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC5D,CAAC;KACF;IACD;QACE,IAAI,EAAE,iCAAiC;QACvC,WAAW,EACT,sJAAsJ;QACxJ,WAAW,EAAE;YACX,KAAK,EAAE,uBAAuB;YAC9B,YAAY,EAAE,KAAK;YACnB,eAAe,EAAE,KAAK;YACtB,cAAc,EAAE,KAAK;YACrB,aAAa,EAAE,IAAI;SACpB;QACD,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uCAAuC,CAAC;SACxE,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,KAA4B,EAAE,EAAE;YAC9C,OAAO,OAAO,CAAC,aAAa,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACjE,CAAC;KACF;CACO,CAAC"}

package/dist/tools/workload-identity.d.ts

@@ -1,118 +0,0 @@
-import { z } from "zod";
-export declare const workloadIdentityTools: readonly [{
-    readonly name: "tailscale_list_workload_identities";
-    readonly description: "List all federated workload identity providers configured for your tailnet. Workload identities allow CI/CD pipelines and automated systems to authenticate using OIDC federation.";
-    readonly annotations: {
-        readonly title: "List workload identities";
-        readonly readOnlyHint: true;
-        readonly destructiveHint: false;
-        readonly idempotentHint: true;
-        readonly openWorldHint: true;
-    };
-    readonly inputSchema: z.ZodObject<{}, "strip", z.ZodTypeAny, {}, {}>;
-    readonly handler: () => Promise<import("../api.js").ApiResponse<unknown>>;
-}, {
-    readonly name: "tailscale_get_workload_identity";
-    readonly description: "Get details for a specific workload identity provider.";
-    readonly annotations: {
-        readonly title: "Get workload identity";
-        readonly readOnlyHint: true;
-        readonly destructiveHint: false;
-        readonly idempotentHint: true;
-        readonly openWorldHint: true;
-    };
-    readonly inputSchema: z.ZodObject<{
-        providerId: z.ZodString;
-    }, "strip", z.ZodTypeAny, {
-        providerId: string;
-    }, {
-        providerId: string;
-    }>;
-    readonly handler: (input: {
-        providerId: string;
-    }) => Promise<import("../api.js").ApiResponse<unknown>>;
-}, {
-    readonly name: "tailscale_create_workload_identity";
-    readonly description: "Create a new workload identity provider for OIDC federation. Enables CI/CD systems (GitHub Actions, GitLab CI, etc.) to authenticate to your tailnet without static credentials.";
-    readonly annotations: {
-        readonly title: "Create workload identity";
-        readonly readOnlyHint: false;
-        readonly destructiveHint: false;
-        readonly idempotentHint: false;
-        readonly openWorldHint: true;
-    };
-    readonly inputSchema: z.ZodObject<{
-        name: z.ZodString;
-        issuerUrl: z.ZodString;
-        audience: z.ZodOptional<z.ZodString>;
-        claimMappings: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
-    }, "strip", z.ZodTypeAny, {
-        name: string;
-        issuerUrl: string;
-        audience?: string | undefined;
-        claimMappings?: Record<string, string> | undefined;
-    }, {
-        name: string;
-        issuerUrl: string;
-        audience?: string | undefined;
-        claimMappings?: Record<string, string> | undefined;
-    }>;
-    readonly handler: (input: {
-        name: string;
-        issuerUrl: string;
-        audience?: string;
-        claimMappings?: Record<string, string>;
-    }) => Promise<import("../api.js").ApiResponse<unknown>>;
-}, {
-    readonly name: "tailscale_update_workload_identity";
-    readonly description: "Update an existing workload identity provider's configuration.";
-    readonly annotations: {
-        readonly title: "Update workload identity";
-        readonly readOnlyHint: false;
-        readonly destructiveHint: false;
-        readonly idempotentHint: true;
-        readonly openWorldHint: true;
-    };
-    readonly inputSchema: z.ZodObject<{
-        providerId: z.ZodString;
-        name: z.ZodOptional<z.ZodString>;
-        audience: z.ZodOptional<z.ZodString>;
-        claimMappings: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
-    }, "strip", z.ZodTypeAny, {
-        providerId: string;
-        name?: string | undefined;
-        audience?: string | undefined;
-        claimMappings?: Record<string, string> | undefined;
-    }, {
-        providerId: string;
-        name?: string | undefined;
-        audience?: string | undefined;
-        claimMappings?: Record<string, string> | undefined;
-    }>;
-    readonly handler: (input: {
-        providerId: string;
-        name?: string;
-        audience?: string;
-        claimMappings?: Record<string, string>;
-    }) => Promise<import("../api.js").ApiResponse<unknown>>;
-}, {
-    readonly name: "tailscale_delete_workload_identity";
-    readonly description: "Delete a workload identity provider. This is irreversible — any CI/CD pipelines using this provider will lose access.";
-    readonly annotations: {
-        readonly title: "Delete workload identity";
-        readonly readOnlyHint: false;
-        readonly destructiveHint: true;
-        readonly idempotentHint: true;
-        readonly openWorldHint: true;
-    };
-    readonly inputSchema: z.ZodObject<{
-        providerId: z.ZodString;
-    }, "strip", z.ZodTypeAny, {
-        providerId: string;
-    }, {
-        providerId: string;
-    }>;
-    readonly handler: (input: {
-        providerId: string;
-    }) => Promise<import("../api.js").ApiResponse<unknown>>;
-}];