mikromcp 1.0.0 → 1.0.2

package/README.md

@@ -12,7 +12,7 @@
 
 [![CI](https://github.com/AliKarami/MikroMCP/actions/workflows/ci.yml/badge.svg)](https://github.com/AliKarami/MikroMCP/actions/workflows/ci.yml)
 [![Release](https://github.com/AliKarami/MikroMCP/actions/workflows/release.yml/badge.svg)](https://github.com/AliKarami/MikroMCP/actions/workflows/release.yml)
-[![Version](https://img.shields.io/badge/version-v1.0.0-EA580C)](package.json)
+[![Version](https://img.shields.io/badge/version-v1.0.2-EA580C)](package.json)
 [![License: MIT](https://img.shields.io/badge/license-MIT-blue.svg)](LICENSE)
 [![Node.js >= 22](https://img.shields.io/badge/node-%3E%3D22-339933)](package.json)
 [![RouterOS 7.x](https://img.shields.io/badge/RouterOS-7.x-293239)](https://help.mikrotik.com/docs/display/ROS/REST+API)

package/dist/main.js

@@ -2,10 +2,11 @@
 
 // src/main.ts
 import { config as loadDotenv } from "dotenv";
+import { join as join3 } from "path";
+import { homedir as homedir3 } from "os";
 
 // src/cli/index.ts
 import { Command } from "commander";
-import { createRequire as createRequire2 } from "module";
 
 // src/config/app-config.ts
 function loadAppConfig() {
@@ -8605,7 +8606,7 @@ function createServerFactory(config, identityRegistry) {
   const makeServer = () => {
     const server = new McpServer({
       name: "mikromcp",
-      version: "1.0.0"
+      version: "1.0.2"
     });
     registerAllTools(server, registry, pool, circuitBreakers, config, identityRegistry);
     return server;
@@ -8927,10 +8928,8 @@ async function runServe() {
 import { existsSync as existsSync3, readFileSync as readFileSync6 } from "fs";
 import { homedir } from "os";
 import * as net from "net";
-import { createRequire } from "module";
 import chalk from "chalk";
-var require2 = createRequire(import.meta.url);
-var { version: localVersion } = require2("../../package.json");
+var localVersion = "1.0.2";
 var results = [];
 function ok(msg) {
   console.log(chalk.green("\u2705 ") + msg);
@@ -9214,6 +9213,12 @@ import { join as join2 } from "path";
 import { stringify as yamlStringify, parse as yamlParse } from "yaml";
 import bcrypt2 from "bcryptjs";
 import chalk2 from "chalk";
+function mikromcpDir() {
+  return join2(homedir2(), ".mikromcp");
+}
+function defaultAuditLogPath() {
+  return join2(mikromcpDir(), "audit.ndjson");
+}
 function suggestEnvPrefix(routerId) {
   return "ROUTER_" + routerId.toUpperCase().replace(/-/g, "_");
 }
@@ -9231,17 +9236,6 @@ function findClaudeDesktopConfig() {
   ];
   return candidates.find((p) => existsSync4(p)) ?? null;
 }
-function appendToGitignore(projectRoot, entry) {
-  const gitignorePath = join2(projectRoot, ".gitignore");
-  if (existsSync4(gitignorePath)) {
-    const content = readFileSync7(gitignorePath, "utf-8");
-    if (!content.split("\n").some((line) => line.trim() === entry)) {
-      writeFileSync2(gitignorePath, content.endsWith("\n") ? content + entry + "\n" : content + "\n" + entry + "\n");
-    }
-  } else {
-    writeFileSync2(gitignorePath, entry + "\n");
-  }
-}
 async function collectRouterInfo() {
   console.log(chalk2.bold("\n\u2500\u2500 Router configuration \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
   const routerId = await input({
@@ -9249,19 +9243,20 @@ async function collectRouterInfo() {
     validate: validateRouterId
   });
   const host = await input({
-    message: "Host / IP (e.g. 192.168.1.1):",
+    message: "Host / IP (e.g. 192.168.88.1):",
     validate: (v) => v.trim().length > 0 ? true : "Host is required"
   });
   const portStr = await input({
     message: "Port:",
-    default: "80",
+    default: "443",
     validate: (v) => {
       const n = Number(v);
       return Number.isInteger(n) && n >= 1 && n <= 65535 ? true : "Port must be 1\u201365535";
     }
   });
   const port = Number(portStr);
-  const tlsEnabled = await confirm({ message: "Enable TLS?", default: false });
+  const tlsDefault = port === 443 || port === 8443;
+  const tlsEnabled = await confirm({ message: "Enable TLS?", default: tlsDefault });
   let rejectUnauthorized = true;
   if (tlsEnabled) {
     rejectUnauthorized = await confirm({
@@ -9348,16 +9343,18 @@ async function collectIdentityInfo() {
     tokenHash
   };
 }
-async function collectEnvPreference(_data) {
-  console.log(chalk2.bold("\n\u2500\u2500 Environment file \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
-  return confirm({ message: "Write env vars to .env?", default: true });
+async function collectEnvPreference() {
+  return confirm({
+    message: "Write credentials to ~/.mikromcp/.env? (No = inject env vars at runtime)",
+    default: true
+  });
 }
 async function collectClaudeDesktopPreference() {
   console.log(chalk2.bold("\n\u2500\u2500 Claude Desktop integration \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
   return confirm({ message: "Register with Claude Desktop?", default: true });
 }
-function writeRoutersYaml(data, configDir) {
-  const filePath = join2(configDir, "routers.yaml");
+function writeRoutersYaml(data) {
+  const filePath = join2(data.configDir, "routers.yaml");
   const newEntry = {
     host: data.host,
     port: data.port,
@@ -9379,12 +9376,12 @@ function writeRoutersYaml(data, configDir) {
     if (!parsed.routers) parsed.routers = {};
   }
   parsed.routers[data.routerId] = newEntry;
-  mkdirSync3(configDir, { recursive: true });
+  mkdirSync3(data.configDir, { recursive: true });
   writeFileSync2(filePath, yamlStringify(parsed, { lineWidth: 0 }));
   return true;
 }
-function writeIdentitiesYaml(data, configDir) {
-  const filePath = join2(configDir, "identities.yaml");
+function writeIdentitiesYaml(data) {
+  const filePath = join2(data.configDir, "identities.yaml");
   const newEntry = {
     token: data.tokenHash,
     role: data.role,
@@ -9398,32 +9395,55 @@ function writeIdentitiesYaml(data, configDir) {
     if (!parsed.identities) parsed.identities = {};
   }
   parsed.identities[data.identityId] = newEntry;
-  mkdirSync3(configDir, { recursive: true });
+  mkdirSync3(data.configDir, { recursive: true });
   writeFileSync2(filePath, yamlStringify(parsed, { lineWidth: 0 }));
   return true;
 }
-function writeDotEnv(data, projectRoot) {
-  const envPath = join2(projectRoot, ".env");
-  const lines = [];
-  lines.push(`ROUTER_${data.envPrefix.replace(/^ROUTER_/, "")}_USER=`);
-  lines.push(`ROUTER_${data.envPrefix.replace(/^ROUTER_/, "")}_PASS=`);
+function writeDotEnv(data) {
   const userKey = `${data.envPrefix}_USER`;
   const passKey = `${data.envPrefix}_PASS`;
-  if (data.createIdentity) {
-    lines.push("MIKROMCP_TRANSPORT=http");
-    lines.push("MIKROMCP_CONFIRMATION_SECRET=");
-  }
-  const block = [`${userKey}=`, `${passKey}=`, ...data.createIdentity ? ["MIKROMCP_TRANSPORT=http", "MIKROMCP_CONFIRMATION_SECRET="] : []].join("\n") + "\n";
-  if (existsSync4(envPath)) {
-    const existing = readFileSync7(envPath, "utf-8");
-    writeFileSync2(envPath, existing.endsWith("\n") ? existing + block : existing + "\n" + block);
+  const auditLogPath = defaultAuditLogPath();
+  const transport2 = data.createIdentity ? "http" : "stdio";
+  const confirmationSecret = data.createIdentity ? randomBytes(32).toString("hex") : "";
+  const lines = [
+    "# \u2500\u2500 Router credentials \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500",
+    `${userKey}=`,
+    `${passKey}=`,
+    "",
+    "# \u2500\u2500 Transport \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500",
+    `# stdio  \u2192 launched directly by Claude Desktop or another MCP client`,
+    `# http   \u2192 standalone server mode with bearer-token auth`,
+    `MIKROMCP_TRANSPORT=${transport2}`,
+    "",
+    "# \u2500\u2500 Config paths \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500",
+    `MIKROMCP_CONFIG_PATH=${join2(data.configDir, "routers.yaml")}`,
+    `MIKROMCP_IDENTITIES_PATH=${join2(data.configDir, "identities.yaml")}`,
+    "",
+    "# \u2500\u2500 Logging \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500",
+    "# Levels: trace | debug | info | warn | error",
+    "MIKROMCP_LOG_LEVEL=info",
+    `MIKROMCP_AUDIT_LOG_PATH=${auditLogPath}`,
+    "",
+    "# \u2500\u2500 HTTP transport (only used when MIKROMCP_TRANSPORT=http) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500",
+    "MIKROMCP_PORT=3000",
+    `MIKROMCP_CONFIRMATION_SECRET=${confirmationSecret}`,
+    "",
+    "# \u2500\u2500 RBAC (optional, for stdio with identity enforcement) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500",
+    "# MIKROMCP_STDIO_IDENTITY="
+  ];
+  const content = lines.join("\n") + "\n";
+  mkdirSync3(data.configDir, { recursive: true });
+  if (existsSync4(data.envPath)) {
+    const existing = readFileSync7(data.envPath, "utf-8");
+    writeFileSync2(data.envPath, existing.endsWith("\n") ? existing + "\n" + content : existing + "\n\n" + content);
   } else {
-    writeFileSync2(envPath, block);
+    writeFileSync2(data.envPath, content);
   }
-  appendToGitignore(projectRoot, ".env");
-  console.log(chalk2.dim(`  Edit .env and fill in your router credentials`));
+  console.log(
+    chalk2.dim(`  Fill in ${userKey} and ${passKey} in ${data.envPath}`)
+  );
 }
-function registerClaudeDesktop(_projectRoot) {
+function registerClaudeDesktop() {
   const configPath = findClaudeDesktopConfig();
   const entry = {
     command: "mikromcp",
@@ -9455,17 +9475,17 @@ function registerClaudeDesktop(_projectRoot) {
 }
 async function runInit() {
   console.log(chalk2.bold.cyan("\n\u{1F527}  MikroMCP \u2014 Interactive Setup Wizard\n"));
-  const projectRoot = process.cwd();
-  const configDir = join2(projectRoot, "config");
   const routerInfo = await collectRouterInfo();
   const identityInfo = await collectIdentityInfo();
-  const writeEnv = await collectEnvPreference({ ...routerInfo, ...identityInfo });
+  const configDir = mikromcpDir();
+  const envPath = join2(configDir, ".env");
+  const writeEnv = await collectEnvPreference();
   let writeRouters = true;
   const routersYamlPath = join2(configDir, "routers.yaml");
   if (existsSync4(routersYamlPath)) {
     console.log(chalk2.bold("\n\u2500\u2500 Config files \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
     writeRouters = await confirm({
-      message: "config/routers.yaml already exists. Add this router to it?",
+      message: "routers.yaml already exists. Add this router to it?",
       default: true
     });
   }
@@ -9473,6 +9493,8 @@ async function runInit() {
   const data = {
     ...routerInfo,
     ...identityInfo,
+    envPath,
+    configDir,
     writeEnv,
     writeRoutersYaml: writeRouters,
     writeIdentitiesYaml: identityInfo.createIdentity,
@@ -9481,23 +9503,23 @@ async function runInit() {
   console.log(chalk2.bold("\n\u2500\u2500 Writing files \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
   const summary = [];
   if (data.writeRoutersYaml) {
-    writeRoutersYaml(data, configDir);
-    summary.push(`config/routers.yaml updated`);
-    console.log(chalk2.green("  \u2714  config/routers.yaml written"));
+    writeRoutersYaml(data);
+    summary.push(`routers.yaml written to ${data.configDir}`);
+    console.log(chalk2.green(`  \u2714  ${join2(data.configDir, "routers.yaml")}`));
   }
   if (data.writeIdentitiesYaml) {
-    writeIdentitiesYaml(data, configDir);
-    summary.push(`config/identities.yaml updated`);
-    console.log(chalk2.green("  \u2714  config/identities.yaml written"));
+    writeIdentitiesYaml(data);
+    summary.push(`identities.yaml written to ${data.configDir}`);
+    console.log(chalk2.green(`  \u2714  ${join2(data.configDir, "identities.yaml")}`));
   }
   if (data.writeEnv) {
-    writeDotEnv(data, projectRoot);
-    summary.push(`.env created (fill in ${data.envPrefix}_USER and ${data.envPrefix}_PASS)`);
-    console.log(chalk2.green("  \u2714  .env written"));
+    writeDotEnv(data);
+    summary.push(`.env written to ${data.envPath}`);
+    console.log(chalk2.green(`  \u2714  ${data.envPath}`));
   }
   let desktopRegistered = false;
   if (data.registerClaudeDesktop) {
-    const result = registerClaudeDesktop(projectRoot);
+    const result = registerClaudeDesktop();
     desktopRegistered = result.registered;
     if (desktopRegistered) {
       summary.push("Claude Desktop registered");
@@ -9509,24 +9531,24 @@ async function runInit() {
     console.log(chalk2.green(`  \u2705  ${item}`));
   }
   if (data.createIdentity && data.rawToken) {
-    console.log(chalk2.bold.yellow(`  \u2705  Bearer token: ${data.rawToken} (save this \u2014 it won't be shown again)`));
+    console.log(
+      chalk2.bold.yellow(`  \u2705  Bearer token: ${data.rawToken} (save this \u2014 it won't be shown again)`)
+    );
   }
   console.log(chalk2.bold("\nNext steps:"));
-  console.log(chalk2.dim(`  1. Edit .env and fill in router credentials`));
-  console.log(chalk2.dim("  2. Run: npm start"));
-  console.log(chalk2.dim("  3. Verify: mikromcp doctor"));
+  console.log(chalk2.dim(`  1. Fill in router credentials in ${data.envPath}`));
+  console.log(chalk2.dim("  2. Run: mikromcp doctor"));
+  console.log(chalk2.dim("  3. Restart Claude Desktop to load the MCP server"));
   console.log();
 }
 
 // src/cli/index.ts
-var require3 = createRequire2(import.meta.url);
-var { version } = require3("../../package.json");
-var program = new Command().name("mikromcp").description("MikroTik RouterOS MCP server").version(version);
+var program = new Command().name("mikromcp").description("MikroTik RouterOS MCP server").version("1.0.2");
 program.command("serve", { isDefault: true }).description("Start the MCP server (default)").action(runServe);
 program.command("doctor").description("Check config, connectivity, and permissions").action(runDoctor);
 program.command("init").description("Interactive setup wizard").action(runInit);
 
 // src/main.ts
-loadDotenv({ override: false });
+loadDotenv({ path: join3(homedir3(), ".mikromcp", ".env"), override: false });
 program.parse();
 //# sourceMappingURL=main.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mikromcp",
-  "version": "1.0.0",
+  "version": "1.0.2",
   "description": "Production-grade MCP server for MikroTik RouterOS",
   "type": "module",
   "main": "dist/main.js",
@@ -19,7 +19,7 @@
     "dev": "tsx watch src/main.ts",
     "build": "tsup",
     "clean": "rm -rf dist",
-    "test": "vitest run",
+    "test": "vitest run && tsc --noEmit && eslint src/",
     "test:watch": "vitest",
     "lint": "eslint src/",
     "format": "prettier --write 'src/**/*.ts' 'test/**/*.ts'",
@@ -38,7 +38,7 @@
   ],
   "repository": {
     "type": "git",
-    "url": "https://github.com/AliKarami/MikroMCP"
+    "url": "git+https://github.com/AliKarami/MikroMCP.git"
   },
   "author": "Ali Karami",
   "license": "MIT",