npm - mikromcp - Versions diffs - 1.0.2 → 1.0.4 - Mend

mikromcp 1.0.2 → 1.0.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (3) hide show

package/README.md CHANGED Viewed

@@ -12,7 +12,7 @@
 [![CI](https://github.com/AliKarami/MikroMCP/actions/workflows/ci.yml/badge.svg)](https://github.com/AliKarami/MikroMCP/actions/workflows/ci.yml)
 [![Release](https://github.com/AliKarami/MikroMCP/actions/workflows/release.yml/badge.svg)](https://github.com/AliKarami/MikroMCP/actions/workflows/release.yml)
-[![Version](https://img.shields.io/badge/version-v1.0.2-EA580C)](package.json)
+[![Version](https://img.shields.io/badge/version-v1.0.4-EA580C)](package.json)
 [![License: MIT](https://img.shields.io/badge/license-MIT-blue.svg)](LICENSE)
 [![Node.js >= 22](https://img.shields.io/badge/node-%3E%3D22-339933)](package.json)
 [![RouterOS 7.x](https://img.shields.io/badge/RouterOS-7.x-293239)](https://help.mikrotik.com/docs/display/ROS/REST+API)
@@ -37,8 +37,6 @@ MikroMCP exists because raw router CLI access is the wrong abstraction for AI ag
 | Raw network access for every assistant       | RBAC identities, bearer tokens for HTTP mode, tool allowlists, and audit trails                                |
 | Fragile troubleshooting workflows            | Router-originated ping, traceroute, torch, logs, interfaces, DHCP, firewall, routes, WiFi, WireGuard, and more |
-MikroMCP is especially useful when you want AI agents to help with network operations without giving them unchecked terminal access.
 ---
 ## Feature Showcase
@@ -56,8 +54,6 @@ MikroMCP is especially useful when you want AI agents to help with network opera
 | 🤖 **AI-agent fit**        | Human-readable responses plus structured JSON content for reasoning, chaining, and automation         |
 | 🧩 **MCP compatibility**   | stdio for desktop clients, Streamable HTTP and legacy SSE for remote or service-style clients         |
-**Best-in-class strengths:** MikroMCP is not just a thin REST wrapper. It models operational safety around RouterOS: typed tool contracts, safe write patterns, router-aware credentials, destructive-action gates, and rollback-oriented workflows.
 ---
 ## Demo
@@ -78,10 +74,9 @@ MikroMCP is especially useful when you want AI agents to help with network opera
 ### Prerequisites
-- Node.js 22 or newer
+- Node.js 22 or newer (for npm install) — or use a standalone binary below
 - MikroTik RouterOS 7.x with the REST API enabled
-- A RouterOS user with the policies required by the tools you plan to use
-- Git and npm
+- A RouterOS user with the policies your tools require
 Recommended RouterOS policies for full tool coverage:
@@ -89,29 +84,65 @@ Recommended RouterOS policies for full tool coverage:
 read, write, api, rest-api, test, ssh, sniff, ftp
 ```
-Notes:
+> `ssh` is required for `ping`, `traceroute`, `torch`, and `run_command`. `sniff` is required by `torch`. `ftp` is required only for `upload_file`.
+---
+### Install
+**npm (recommended)**
+```bash
+npm install -g mikromcp
+```
+**Standalone binaries**
-- `ssh` is required for `ping`, `traceroute`, `torch`, and `run_command`.
-- `sniff` is required by `torch`.
-- `ftp` is required only for `upload_file`.
+Download the binary for your platform from the [latest GitHub release](https://github.com/AliKarami/MikroMCP/releases/latest) — no Node.js required.
-### Install Locally
+**Docker**
 ```bash
-git clone https://github.com/AliKarami/MikroMCP.git
-cd MikroMCP
-npm install
-npm run build
-cp config/routers.example.yaml config/routers.yaml
-cp config/identities.example.yaml config/identities.yaml
+docker pull ghcr.io/alikarami/mikromcp:latest
+```
+---
+### Set Up With the Init Wizard
+Run the interactive setup wizard:
+```bash
+mikromcp init
 ```
-Edit `config/routers.yaml`:
+The wizard will ask for your router details and write everything to `~/.mikromcp/`:
+```
+~/.mikromcp/
+├── routers.yaml      # router registry
+├── identities.yaml   # RBAC identities (HTTP mode)
+└── .env              # credentials and runtime settings
+```
+`~/.mikromcp/.env` is loaded automatically every time MikroMCP starts — no shell exports or Claude Desktop `env` blocks needed. Fill in the credentials it generates:
+```bash
+# ~/.mikromcp/.env  (generated by mikromcp init)
+ROUTER_CORE01_USER=
+ROUTER_CORE01_PASS=
+```
+To edit your router registry directly:
+```bash
+nano ~/.mikromcp/routers.yaml
+```
 ```yaml
 routers:
   core-01:
-    host: "10.0.0.1"
+    host: "192.168.88.1"
     port: 443
     tls:
       enabled: true
@@ -119,59 +150,34 @@ routers:
     credentials:
       source: "env"
       envPrefix: "ROUTER_CORE01"
-    tags: ["core", "production"]
-    rosVersion: "7.14"
+    tags: ["core"]
+    rosVersion: "7"
 ```
-Provide router credentials through environment variables:
-```bash
-export ROUTER_CORE01_USER="mcp-api"
-export ROUTER_CORE01_PASS="your-router-password"
-npm start
-```
-### Docker
+---
-#### Pull and run
+### Verify With Doctor
 ```bash
-docker pull ghcr.io/alikarami/mikromcp:latest
+mikromcp doctor
 ```
-One-liner with environment variables:
+Doctor checks Node version, config files, router reachability, Claude Desktop registration, and whether a newer version is available.
-```bash
-docker run --rm \
-  -e MIKROMCP_TRANSPORT=http \
-  -e MIKROMCP_PORT=3000 \
-  -e MIKROMCP_CONFIRMATION_SECRET="$(openssl rand -hex 32)" \
-  -e ROUTER_CORE01_USER=mcp-api \
-  -e ROUTER_CORE01_PASS=your-router-password \
-  -v "$(pwd)/config:/app/config:ro" \
-  -p 3000:3000 \
-  ghcr.io/alikarami/mikromcp:latest
-```
+---
-#### Docker Compose
+### Run
-Copy the example file and fill in your `.env`:
+**stdio (for Claude Desktop and other desktop MCP clients)**
 ```bash
-cp docker-compose.example.yml docker-compose.yml
-cp config/routers.example.yaml config/routers.yaml
-cp config/identities.example.yaml config/identities.yaml
-# edit config/routers.yaml and set MIKROMCP_CONFIRMATION_SECRET + router credentials in .env
-docker compose up -d
+mikromcp serve
 ```
-See `docker-compose.example.yml` for the full service definition.
-#### Build from source
+**HTTP mode (for service deployments)**
 ```bash
-docker build -t mikromcp .
-docker run --rm -e MIKROMCP_TRANSPORT=http -p 3000:3000 mikromcp
+MIKROMCP_TRANSPORT=http mikromcp serve
 ```
 ---
@@ -180,25 +186,22 @@ docker run --rm -e MIKROMCP_TRANSPORT=http -p 3000:3000 mikromcp
 ### Claude Desktop
-Add MikroMCP to `~/Library/Application Support/Claude/claude_desktop_config.json` on macOS:
+Run `mikromcp init` and choose **Register with Claude Desktop** — it patches `claude_desktop_config.json` automatically.
+Or add it manually to `~/Library/Application Support/Claude/claude_desktop_config.json` on macOS:
 ```json
 {
   "mcpServers": {
-    "mikrotik": {
-      "command": "node",
-      "args": ["/absolute/path/to/MikroMCP/dist/main.js"],
-      "env": {
-        "MIKROMCP_CONFIG_PATH": "/absolute/path/to/MikroMCP/config/routers.yaml",
-        "ROUTER_CORE01_USER": "mcp-api",
-        "ROUTER_CORE01_PASS": "your-router-password"
-      }
+    "mikromcp": {
+      "command": "mikromcp",
+      "args": ["serve"]
     }
   }
 }
 ```
-Restart Claude Desktop, then ask:
+No `env` block needed — credentials are loaded from `~/.mikromcp/.env` at startup. Restart Claude Desktop, then ask:
 ```text
 Use MikroMCP to show CPU, memory, uptime, active interfaces, and warning logs for core-01.
@@ -206,48 +209,72 @@ Use MikroMCP to show CPU, memory, uptime, active interfaces, and warning logs fo
 ### HTTP / SSE Mode
-HTTP mode is useful for service deployments and MCP clients that connect over a local or private network endpoint.
+HTTP mode is useful for service deployments and MCP clients that connect over a network endpoint.
+Set in `~/.mikromcp/.env`:
+```bash
+MIKROMCP_TRANSPORT=http
+MIKROMCP_PORT=3000
+MIKROMCP_CONFIRMATION_SECRET=<openssl rand -hex 32>
+```
+Then run:
 ```bash
-export MIKROMCP_TRANSPORT=http
-export MIKROMCP_PORT=3000
-export MIKROMCP_BIND_HOST=127.0.0.1
-export MIKROMCP_CONFIRMATION_SECRET="$(openssl rand -hex 32)"
-export ROUTER_CORE01_USER="mcp-api"
-export ROUTER_CORE01_PASS="your-router-password"
-npm start
+mikromcp serve
 ```
-Every HTTP/SSE request must include:
+Every HTTP request must include:
 ```text
 Authorization: Bearer <token>
 ```
-Tokens are configured as bcrypt hashes in `config/identities.yaml`.
+Tokens are configured as bcrypt hashes in `~/.mikromcp/identities.yaml`. Use `mikromcp init` to generate them.
+### Docker
+```bash
+docker run --rm \
+  -e MIKROMCP_TRANSPORT=http \
+  -e MIKROMCP_PORT=3000 \
+  -e MIKROMCP_CONFIRMATION_SECRET="$(openssl rand -hex 32)" \
+  -e ROUTER_CORE01_USER=mcp-api \
+  -e ROUTER_CORE01_PASS=your-router-password \
+  -e MIKROMCP_CONFIG_PATH=/config/routers.yaml \
+  -v "$HOME/.mikromcp:/config:ro" \
+  -p 3000:3000 \
+  ghcr.io/alikarami/mikromcp:latest
+```
+Pass `MIKROMCP_CONFIG_PATH` and `MIKROMCP_IDENTITIES_PATH` explicitly when running in Docker since `~/.mikromcp/` inside the container refers to the container's home directory.
 ---
 ## Configuration Reference
-| Variable                          | Default                  | Purpose                                                |
-| --------------------------------- | ------------------------ | ------------------------------------------------------ |
-| `MIKROMCP_TRANSPORT`              | `stdio`                  | `stdio` or `http`                                      |
-| `MIKROMCP_CONFIG_PATH`            | `config/routers.yaml`    | Router registry path                                   |
-| `MIKROMCP_IDENTITIES_PATH`        | `config/identities.yaml` | Identity and bearer-token registry                     |
-| `MIKROMCP_STDIO_IDENTITY`         | built-in superadmin      | Named identity for stdio mode                          |
-| `MIKROMCP_PORT`                   | `3000`                   | HTTP transport port                                    |
-| `MIKROMCP_BIND_HOST`              | `127.0.0.1`              | HTTP bind address                                      |
-| `MIKROMCP_CONFIRMATION_SECRET`    | unset                    | HMAC secret for destructive-action confirmation tokens |
-| `MIKROMCP_AUDIT_LOG_PATH`         | unset                    | Optional NDJSON audit log file path                    |
-| `MIKROMCP_HTTP_MAX_BODY_BYTES`    | `1048576`                | HTTP request body cap                                  |
-| `MIKROMCP_HTTP_RATE_LIMIT_RPM`    | `60`                     | Requests per minute per IP; `0` disables rate limiting |
-| `MIKROMCP_SSH_COMMAND_TIMEOUT_MS` | `30000`                  | SSH command timeout                                    |
-| `MIKROMCP_SSH_MAX_OUTPUT_BYTES`   | `524288`                 | SSH output cap                                         |
-| `MIKROMCP_CMD_ALLOW`              | unset                    | Global allowlist patterns for `run_command`            |
-| `MIKROMCP_CMD_DENY`               | unset                    | Global denylist patterns for `run_command`             |
-| `ROUTER_<PREFIX>_USER`            | unset                    | Router username from `envPrefix`                       |
-| `ROUTER_<PREFIX>_PASS`            | unset                    | Router password from `envPrefix`                       |
+All settings can be placed in `~/.mikromcp/.env` or passed as environment variables. Values in `~/.mikromcp/.env` are loaded at startup; explicit environment variables always take precedence.
+| Variable                          | Default                          | Purpose                                                |
+| --------------------------------- | -------------------------------- | ------------------------------------------------------ |
+| `MIKROMCP_TRANSPORT`              | `stdio`                          | `stdio` or `http`                                      |
+| `MIKROMCP_CONFIG_PATH`            | `~/.mikromcp/routers.yaml`       | Router registry path                                   |
+| `MIKROMCP_IDENTITIES_PATH`        | `~/.mikromcp/identities.yaml`    | Identity and bearer-token registry                     |
+| `MIKROMCP_STDIO_IDENTITY`         | built-in superadmin              | Named identity for stdio mode                          |
+| `MIKROMCP_PORT`                   | `3000`                           | HTTP transport port                                    |
+| `MIKROMCP_BIND_HOST`              | `127.0.0.1`                      | HTTP bind address                                      |
+| `MIKROMCP_CONFIRMATION_SECRET`    | unset                            | HMAC secret for destructive-action confirmation tokens |
+| `MIKROMCP_AUDIT_LOG_PATH`         | unset                            | Optional NDJSON audit log file path                    |
+| `MIKROMCP_DATA_DIR`               | `~/.mikromcp/data`               | Snapshots and write-journal directory                  |
+| `MIKROMCP_HTTP_MAX_BODY_BYTES`    | `1048576`                        | HTTP request body cap                                  |
+| `MIKROMCP_HTTP_RATE_LIMIT_RPM`    | `60`                             | Requests per minute per IP; `0` disables rate limiting |
+| `MIKROMCP_SSH_COMMAND_TIMEOUT_MS` | `30000`                          | SSH command timeout                                    |
+| `MIKROMCP_SSH_MAX_OUTPUT_BYTES`   | `524288`                         | SSH output cap                                         |
+| `MIKROMCP_CMD_ALLOW`              | unset                            | Global allowlist patterns for `run_command`            |
+| `MIKROMCP_CMD_DENY`               | unset                            | Global denylist patterns for `run_command`             |
+| `ROUTER_<PREFIX>_USER`            | unset                            | Router username from `envPrefix`                       |
+| `ROUTER_<PREFIX>_PASS`            | unset                            | Router password from `envPrefix`                       |
 ---
@@ -353,14 +380,6 @@ to 1.1.1.1. If packet loss is present, use torch on the WAN interface for a
 short traffic snapshot.
 ```
-### Configuration Backup And Audit
-```text
-List files, scripts, scheduled jobs, firewall rules, DNS static records, and
-routes on core-01. Produce an audit summary with change-risk notes and suggested
-cleanup tasks.
-```
 ### Plan / Apply / Rollback Workflow
 ```text
@@ -383,15 +402,13 @@ AI assistants can use MikroMCP to:
 - Preview changes before mutation and explain exactly what would happen.
 - Respect tool-level authorization, router scoping, maintenance windows, and confirmation gates.
-This makes MikroMCP a practical bridge between MikroTik networks and the emerging AI infrastructure ecosystem: Claude MCP, LLM tooling, infrastructure automation, DevOps workflows, and network operations copilots.
 ---
 ## Documentation
 | Resource                                                                                              | Use it for                                                 |
 | ----------------------------------------------------------------------------------------------------- | ---------------------------------------------------------- |
-| [ROADMAP.md](ROADMAP.md)                                                                              | Shipped milestones and planned v1.0 work                   |
+| [ROADMAP.md](ROADMAP.md)                                                                              | Shipped milestones and planned work                        |
 | [Architecture](https://github.com/AliKarami/MikroMCP/wiki/Architecture)                               | System layers and request pipeline                         |
 | [Setup Guide](https://github.com/AliKarami/MikroMCP/wiki/Setup-Guide)                                 | RouterOS REST setup and end-to-end onboarding              |
 | [Configuration](https://github.com/AliKarami/MikroMCP/wiki/Configuration)                             | Router registry, TLS, SSH, credentials, HTTP mode          |
@@ -401,7 +418,6 @@ This makes MikroMCP a practical bridge between MikroTik networks and the emergin
 | [Error Handling](https://github.com/AliKarami/MikroMCP/wiki/Error-Handling)                           | Typed errors, retry behavior, circuit breaker behavior     |
 | [Development](https://github.com/AliKarami/MikroMCP/wiki/Development)                                 | Project structure, tests, MCP Inspector workflow           |
 | [Contributing](https://github.com/AliKarami/MikroMCP/wiki/Contributing)                               | Adding tools, coding conventions, PR checklist             |
-| [Roadmap](https://github.com/AliKarami/MikroMCP/wiki/Roadmap)                                         | Wiki mirror of the milestone roadmap                       |
 ---
@@ -411,30 +427,23 @@ This makes MikroMCP a practical bridge between MikroTik networks and the emergin
 npm run dev          # tsx watch hot-reload
 npm run build        # build ESM output to dist/main.js
 npm start            # run built server
-npm test             # run Vitest once
-npm run typecheck    # TypeScript type checking
-npm run lint         # ESLint
+npm test             # vitest + tsc + eslint
 npm run format       # Prettier
 ```
-Run this before committing:
-```bash
-npm test
-npm run typecheck
-```
 Key project paths:
 | Path                             | Purpose                                                                                     |
 | -------------------------------- | ------------------------------------------------------------------------------------------- |
-| `src/main.ts`                    | Loads config and starts stdio or HTTP transport                                             |
+| `src/main.ts`                    | Loads `~/.mikromcp/.env` and starts stdio or HTTP transport                                 |
 | `src/mcp/tool-registry.ts`       | Registers tools and applies auth, retry, circuit breaker, audit, snapshots, and credentials |
 | `src/domain/tools/`              | Tool definitions and handlers                                                               |
 | `src/domain/snapshot/`           | Snapshot, diff, and write-journal support                                                   |
 | `src/adapter/rest-client.ts`     | RouterOS REST API client                                                                    |
 | `src/adapter/ssh-client.ts`      | SSH execution adapter for diagnostics and guarded commands                                  |
 | `src/config/router-registry.ts`  | Router inventory loader                                                                     |
+| `src/cli/init.ts`                | Interactive setup wizard (`mikromcp init`)                                                  |
+| `src/cli/doctor.ts`              | Health check command (`mikromcp doctor`)                                                    |
 | `config/routers.example.yaml`    | Example multi-router registry                                                               |
 | `config/identities.example.yaml` | Example RBAC identity registry                                                              |
@@ -448,7 +457,7 @@ Key project paths:
 | v0.7      | ✅ Shipped | Identity, bearer auth, RBAC, audit log, confirmation gate                                                |
 | v0.8      | ✅ Shipped | Snapshots, write journal, plan/apply, rollback, maintenance windows                                      |
 | v0.9      | ✅ Shipped | Fleet operations, IPSec, certificates, users, DHCP servers/pools, queues/QoS, VRRP, SNMP/NTP, Netwatch, discovery, ARP, health checks |
-| v1.0      | 🔜 Planned | Docker/npm/systemd distribution, Prometheus metrics, CHR integration tests, doctor CLI, stability policy |
+| v1.0      | ✅ Shipped | npm package, standalone binaries, Docker images, `mikromcp init` wizard, `mikromcp doctor`, `~/.mikromcp/` convention |
 See [ROADMAP.md](ROADMAP.md) for the complete milestone plan.
@@ -468,12 +477,9 @@ Good first contributions:
 Development standards:
-- TypeScript strict mode
-- ESM imports with `.js` extensions
-- Zod schemas with `.strict()`
-- Idempotency and `dryRun` for write tools
-- `MikroMCPError` for domain errors
-- Focused Vitest coverage for every tool
+- TypeScript strict mode, ESM imports with `.js` extensions
+- Zod schemas with `.strict()`, idempotency and `dryRun` for write tools
+- `MikroMCPError` for domain errors, focused Vitest coverage for every tool
 Please open an issue before large changes so maintainers can align on scope.
@@ -481,18 +487,17 @@ Please open an issue before large changes so maintainers can align on scope.
 ## Security
-MikroMCP is designed for sensitive infrastructure, but it still controls real network devices. Treat it like an operations system.
+MikroMCP controls real network devices. Treat it like an operations system.
 - Use least-privilege RouterOS users.
 - Prefer TLS verification and certificate fingerprint pinning.
-- Pin SSH host-key fingerprints for SSH-enabled tools.
-- Keep router credentials in environment variables or a secrets system, not YAML.
+- Keep router credentials in `~/.mikromcp/.env`, not in YAML or shell history.
 - Use HTTP mode behind a trusted network boundary.
 - Configure identities with the smallest practical `allowedRouters` and `allowedToolPatterns`.
-- Enable audit logging for shared or production use.
+- Enable audit logging (`MIKROMCP_AUDIT_LOG_PATH`) for shared or production use.
 - Test write tools with `dryRun: true` before applying changes.
-For vulnerabilities or unsafe behavior, open a private security advisory if available, or contact the maintainer before publishing exploit details.
+For vulnerabilities or unsafe behavior, open a private security advisory or contact the maintainer before publishing details.
 ---
@@ -501,7 +506,6 @@ For vulnerabilities or unsafe behavior, open a private security advisory if avai
 - ⭐ Star the repository if MikroMCP helps your MikroTik or MCP workflow.
 - 🍴 Fork it to add RouterOS surfaces your network depends on.
 - 🧵 Open an issue for bugs, feature requests, compatibility notes, or documentation gaps.
-- 🛣️ Follow the [roadmap](ROADMAP.md) for upcoming fleet, distribution, and production-readiness work.
 ---

package/dist/main.js CHANGED Viewed

@@ -2,28 +2,33 @@
 // src/main.ts
 import { config as loadDotenv } from "dotenv";
-import { join as join3 } from "path";
-import { homedir as homedir3 } from "os";
+import { join as join5 } from "path";
+import { homedir as homedir5 } from "os";
 // src/cli/index.ts
 import { Command } from "commander";
 // src/config/app-config.ts
+import { join } from "path";
+import { homedir } from "os";
+function mikromcpDir() {
+  return join(homedir(), ".mikromcp");
+}
 function loadAppConfig() {
   const env = process.env;
-  const dataDir = env.MIKROMCP_DATA_DIR ?? "data";
+  const dataDir = env.MIKROMCP_DATA_DIR ?? join(mikromcpDir(), "data");
   return {
     transport: env.MIKROMCP_TRANSPORT === "http" ? "http" : "stdio",
     port: parseInt(env.MIKROMCP_PORT ?? "3000", 10),
     bindHost: env.MIKROMCP_BIND_HOST ?? "127.0.0.1",
     logLevel: env.MIKROMCP_LOG_LEVEL ?? "info",
-    configPath: env.MIKROMCP_CONFIG_PATH ?? "config/routers.yaml",
+    configPath: env.MIKROMCP_CONFIG_PATH ?? join(mikromcpDir(), "routers.yaml"),
     dataDir,
     snapshotDir: `${dataDir}/snapshots`,
     journalPath: `${dataDir}/write-journal.ndjson`,
     cmdAllow: (env.MIKROMCP_CMD_ALLOW ?? "").split(",").map((s) => s.trim()).filter(Boolean),
     cmdDeny: (env.MIKROMCP_CMD_DENY ?? "").split(",").map((s) => s.trim()).filter(Boolean),
-    identitiesPath: env.MIKROMCP_IDENTITIES_PATH ?? "config/identities.yaml",
+    identitiesPath: env.MIKROMCP_IDENTITIES_PATH ?? join(mikromcpDir(), "identities.yaml"),
     stdioIdentity: env.MIKROMCP_STDIO_IDENTITY || void 0,
     confirmationSecret: env.MIKROMCP_CONFIRMATION_SECRET || void 0,
     auditLogPath: env.MIKROMCP_AUDIT_LOG_PATH || void 0,
@@ -4900,10 +4905,12 @@ var containerTools = [listContainersTool, manageContainerTool];
 // src/domain/tools/change-management-tools.ts
 import { z as z23 } from "zod";
 import { readFileSync as readFileSync2 } from "fs";
+import { join as join3 } from "path";
+import { homedir as homedir2 } from "os";
 // src/domain/snapshot/snapshot-engine.ts
 import { mkdirSync, writeFileSync, readFileSync } from "fs";
-import { join } from "path";
+import { join as join2 } from "path";
 import { nanoid } from "nanoid";
 function pathToSlug(rosPath) {
   return rosPath.replace(/\//g, "-");
@@ -4914,8 +4921,8 @@ function timestampPrefix() {
 async function takeSnapshot(client, routerId, path, snapshotDir) {
   const records = await client.get(path, {});
   const id = `${timestampPrefix()}-${pathToSlug(path)}-${nanoid(6)}`;
-  const dir = join(snapshotDir, routerId);
-  const filePath = join(dir, `${id}.json`);
+  const dir = join2(snapshotDir, routerId);
+  const filePath = join2(dir, `${id}.json`);
   const ts = (/* @__PURE__ */ new Date()).toISOString();
   mkdirSync(dir, { recursive: true });
   const stored = { id, routerId, path, ts, records };
@@ -5177,7 +5184,7 @@ function createChangeManagementTools(baseTools2) {
     async handler(params, context) {
       const parsed = applyPlanInputSchema.parse(params);
       log24.info({ routerId: context.routerId, stepCount: parsed.steps.length }, "Applying plan");
-      const dataDir = process.env.MIKROMCP_DATA_DIR ?? "data";
+      const dataDir = process.env.MIKROMCP_DATA_DIR ?? join3(homedir2(), ".mikromcp", "data");
       const journalPath = `${dataDir}/write-journal.ndjson`;
       const snapshotDir = `${dataDir}/snapshots`;
       const results2 = [];
@@ -5271,7 +5278,7 @@ function createChangeManagementTools(baseTools2) {
     },
     async handler(params, context) {
       const parsed = rollbackChangeInputSchema.parse(params);
-      const dataDir = process.env.MIKROMCP_DATA_DIR ?? "data";
+      const dataDir = process.env.MIKROMCP_DATA_DIR ?? join3(homedir2(), ".mikromcp", "data");
       const journalPath = `${dataDir}/write-journal.ndjson`;
       const snapshotDir = `${dataDir}/snapshots`;
       log24.info({ routerId: context.routerId, journalId: parsed.journalId }, "Rolling back change");
@@ -7935,7 +7942,7 @@ function getStdioIdentity(stdioIdentityName, registry) {
       details: { stdioIdentityName },
       recoverability: {
         retryable: false,
-        suggestedAction: `Add an identity named "${stdioIdentityName}" to config/identities.yaml or unset MIKROMCP_STDIO_IDENTITY.`
+        suggestedAction: `Add an identity named "${stdioIdentityName}" to ~/.mikromcp/identities.yaml or unset MIKROMCP_STDIO_IDENTITY.`
       }
     });
   }
@@ -8606,7 +8613,7 @@ function createServerFactory(config, identityRegistry) {
   const makeServer = () => {
     const server = new McpServer({
       name: "mikromcp",
-      version: "1.0.2"
+      version: "1.0.4"
     });
     registerAllTools(server, registry, pool, circuitBreakers, config, identityRegistry);
     return server;
@@ -8926,10 +8933,10 @@ async function runServe() {
 // src/cli/doctor.ts
 import { existsSync as existsSync3, readFileSync as readFileSync6 } from "fs";
-import { homedir } from "os";
+import { homedir as homedir3 } from "os";
 import * as net from "net";
 import chalk from "chalk";
-var localVersion = "1.0.2";
+var localVersion = "1.0.4";
 var results = [];
 function ok(msg) {
   console.log(chalk.green("\u2705 ") + msg);
@@ -9085,7 +9092,7 @@ async function checkRouter(router) {
   }
 }
 function checkIdentities(identitiesPath, transport2) {
-  if (!process.env.MIKROMCP_IDENTITIES_PATH && identitiesPath === "config/identities.yaml") {
+  if (!process.env.MIKROMCP_IDENTITIES_PATH && identitiesPath.endsWith(".mikromcp/identities.yaml")) {
     if (!existsSync3(identitiesPath)) {
       return;
     }
@@ -9109,8 +9116,8 @@ function checkIdentities(identitiesPath, transport2) {
 }
 function checkClaudeDesktop() {
   const candidatePaths = [
-    `${homedir()}/Library/Application Support/Claude/claude_desktop_config.json`,
-    `${homedir()}/.config/Claude/claude_desktop_config.json`
+    `${homedir3()}/Library/Application Support/Claude/claude_desktop_config.json`,
+    `${homedir3()}/.config/Claude/claude_desktop_config.json`
   ];
   const configPath = candidatePaths.find((p) => existsSync3(p));
   if (!configPath) {
@@ -9208,16 +9215,16 @@ import {
   mkdirSync as mkdirSync3,
   copyFileSync
 } from "fs";
-import { homedir as homedir2 } from "os";
-import { join as join2 } from "path";
+import { homedir as homedir4 } from "os";
+import { join as join4 } from "path";
 import { stringify as yamlStringify, parse as yamlParse } from "yaml";
 import bcrypt2 from "bcryptjs";
 import chalk2 from "chalk";
-function mikromcpDir() {
-  return join2(homedir2(), ".mikromcp");
+function mikromcpDir2() {
+  return join4(homedir4(), ".mikromcp");
 }
 function defaultAuditLogPath() {
-  return join2(mikromcpDir(), "audit.ndjson");
+  return join4(mikromcpDir2(), "audit.ndjson");
 }
 function suggestEnvPrefix(routerId) {
   return "ROUTER_" + routerId.toUpperCase().replace(/-/g, "_");
@@ -9231,8 +9238,8 @@ function splitTags(val) {
 }
 function findClaudeDesktopConfig() {
   const candidates = [
-    join2(homedir2(), "Library", "Application Support", "Claude", "claude_desktop_config.json"),
-    join2(homedir2(), ".config", "Claude", "claude_desktop_config.json")
+    join4(homedir4(), "Library", "Application Support", "Claude", "claude_desktop_config.json"),
+    join4(homedir4(), ".config", "Claude", "claude_desktop_config.json")
   ];
   return candidates.find((p) => existsSync4(p)) ?? null;
 }
@@ -9255,8 +9262,7 @@ async function collectRouterInfo() {
     }
   });
   const port = Number(portStr);
-  const tlsDefault = port === 443 || port === 8443;
-  const tlsEnabled = await confirm({ message: "Enable TLS?", default: tlsDefault });
+  const tlsEnabled = await confirm({ message: "Enable TLS?", default: false });
   let rejectUnauthorized = true;
   if (tlsEnabled) {
     rejectUnauthorized = await confirm({
@@ -9277,6 +9283,14 @@ async function collectRouterInfo() {
     default: suggestedPrefix,
     validate: (v) => v.trim().length > 0 ? true : "Env prefix is required"
   });
+  const routerUser = await input({
+    message: `Router username (${envPrefix}_USER):`,
+    validate: (v) => v.trim().length > 0 ? true : "Username is required"
+  });
+  const routerPass = await input({
+    message: `Router password (${envPrefix}_PASS):`,
+    validate: (v) => v.trim().length > 0 ? true : "Password is required"
+  });
   const tagsRaw = await input({
     message: "Tags (comma-separated, optional):",
     default: ""
@@ -9287,7 +9301,7 @@ async function collectRouterInfo() {
     default: "7",
     validate: (v) => v.trim().length > 0 ? true : "Version is required"
   });
-  return { routerId, host, port, tlsEnabled, rejectUnauthorized, envPrefix, tags, rosVersion };
+  return { routerId, host, port, tlsEnabled, rejectUnauthorized, envPrefix, routerUser, routerPass, tags, rosVersion };
 }
 async function collectIdentityInfo() {
   console.log(chalk2.bold("\n\u2500\u2500 Identity / HTTP transport \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
@@ -9343,6 +9357,25 @@ async function collectIdentityInfo() {
     tokenHash
   };
 }
+async function collectTransport() {
+  console.log(chalk2.bold("\n\u2500\u2500 Transport \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
+  const transport2 = await select({
+    message: "Transport mode:",
+    choices: [
+      { value: "stdio", name: "stdio  \u2014 launched by Claude Desktop or an MCP client (recommended)" },
+      { value: "http", name: "http   \u2014 standalone HTTP server with bearer-token auth" }
+    ],
+    default: "stdio"
+  });
+  if (transport2 === "http") {
+    console.log(
+      chalk2.yellow(
+        "\n  \u26A0  HTTP mode requires every request to include:\n     Authorization: Bearer <token>\n  Set MIKROMCP_CONFIRMATION_SECRET in ~/.mikromcp/.env and create an identity above."
+      )
+    );
+  }
+  return transport2;
+}
 async function collectEnvPreference() {
   return confirm({
     message: "Write credentials to ~/.mikromcp/.env? (No = inject env vars at runtime)",
@@ -9354,7 +9387,7 @@ async function collectClaudeDesktopPreference() {
   return confirm({ message: "Register with Claude Desktop?", default: true });
 }
 function writeRoutersYaml(data) {
-  const filePath = join2(data.configDir, "routers.yaml");
+  const filePath = join4(data.configDir, "routers.yaml");
   const newEntry = {
     host: data.host,
     port: data.port,
@@ -9381,7 +9414,7 @@ function writeRoutersYaml(data) {
   return true;
 }
 function writeIdentitiesYaml(data) {
-  const filePath = join2(data.configDir, "identities.yaml");
+  const filePath = join4(data.configDir, "identities.yaml");
   const newEntry = {
     token: data.tokenHash,
     role: data.role,
@@ -9403,21 +9436,20 @@ function writeDotEnv(data) {
   const userKey = `${data.envPrefix}_USER`;
   const passKey = `${data.envPrefix}_PASS`;
   const auditLogPath = defaultAuditLogPath();
-  const transport2 = data.createIdentity ? "http" : "stdio";
-  const confirmationSecret = data.createIdentity ? randomBytes(32).toString("hex") : "";
+  const confirmationSecret = data.transport === "http" ? randomBytes(32).toString("hex") : "";
   const lines = [
     "# \u2500\u2500 Router credentials \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500",
-    `${userKey}=`,
-    `${passKey}=`,
+    `${userKey}=${data.routerUser}`,
+    `${passKey}=${data.routerPass}`,
     "",
     "# \u2500\u2500 Transport \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500",
     `# stdio  \u2192 launched directly by Claude Desktop or another MCP client`,
     `# http   \u2192 standalone server mode with bearer-token auth`,
-    `MIKROMCP_TRANSPORT=${transport2}`,
+    `MIKROMCP_TRANSPORT=${data.transport}`,
     "",
     "# \u2500\u2500 Config paths \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500",
-    `MIKROMCP_CONFIG_PATH=${join2(data.configDir, "routers.yaml")}`,
-    `MIKROMCP_IDENTITIES_PATH=${join2(data.configDir, "identities.yaml")}`,
+    `MIKROMCP_CONFIG_PATH=${join4(data.configDir, "routers.yaml")}`,
+    `MIKROMCP_IDENTITIES_PATH=${join4(data.configDir, "identities.yaml")}`,
     "",
     "# \u2500\u2500 Logging \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500",
     "# Levels: trace | debug | info | warn | error",
@@ -9439,9 +9471,6 @@ function writeDotEnv(data) {
   } else {
     writeFileSync2(data.envPath, content);
   }
-  console.log(
-    chalk2.dim(`  Fill in ${userKey} and ${passKey} in ${data.envPath}`)
-  );
 }
 function registerClaudeDesktop() {
   const configPath = findClaudeDesktopConfig();
@@ -9477,11 +9506,12 @@ async function runInit() {
   console.log(chalk2.bold.cyan("\n\u{1F527}  MikroMCP \u2014 Interactive Setup Wizard\n"));
   const routerInfo = await collectRouterInfo();
   const identityInfo = await collectIdentityInfo();
-  const configDir = mikromcpDir();
-  const envPath = join2(configDir, ".env");
+  const configDir = mikromcpDir2();
+  const envPath = join4(configDir, ".env");
+  const transport2 = await collectTransport();
   const writeEnv = await collectEnvPreference();
   let writeRouters = true;
-  const routersYamlPath = join2(configDir, "routers.yaml");
+  const routersYamlPath = join4(configDir, "routers.yaml");
   if (existsSync4(routersYamlPath)) {
     console.log(chalk2.bold("\n\u2500\u2500 Config files \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
     writeRouters = await confirm({
@@ -9493,6 +9523,7 @@ async function runInit() {
   const data = {
     ...routerInfo,
     ...identityInfo,
+    transport: transport2,
     envPath,
     configDir,
     writeEnv,
@@ -9505,12 +9536,12 @@ async function runInit() {
   if (data.writeRoutersYaml) {
     writeRoutersYaml(data);
     summary.push(`routers.yaml written to ${data.configDir}`);
-    console.log(chalk2.green(`  \u2714  ${join2(data.configDir, "routers.yaml")}`));
+    console.log(chalk2.green(`  \u2714  ${join4(data.configDir, "routers.yaml")}`));
   }
   if (data.writeIdentitiesYaml) {
     writeIdentitiesYaml(data);
     summary.push(`identities.yaml written to ${data.configDir}`);
-    console.log(chalk2.green(`  \u2714  ${join2(data.configDir, "identities.yaml")}`));
+    console.log(chalk2.green(`  \u2714  ${join4(data.configDir, "identities.yaml")}`));
   }
   if (data.writeEnv) {
     writeDotEnv(data);
@@ -9543,12 +9574,12 @@ async function runInit() {
 }
 // src/cli/index.ts
-var program = new Command().name("mikromcp").description("MikroTik RouterOS MCP server").version("1.0.2");
+var program = new Command().name("mikromcp").description("MikroTik RouterOS MCP server").version("1.0.4");
 program.command("serve", { isDefault: true }).description("Start the MCP server (default)").action(runServe);
 program.command("doctor").description("Check config, connectivity, and permissions").action(runDoctor);
 program.command("init").description("Interactive setup wizard").action(runInit);
 // src/main.ts
-loadDotenv({ path: join3(homedir3(), ".mikromcp", ".env"), override: false });
+loadDotenv({ path: join5(homedir5(), ".mikromcp", ".env"), override: false });
 program.parse();
 //# sourceMappingURL=main.js.map

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "mikromcp",
-  "version": "1.0.2",
+  "version": "1.0.4",
   "description": "Production-grade MCP server for MikroTik RouterOS",
   "type": "module",
   "main": "dist/main.js",