zapret2-mcp 0.3.0

package/build/tools/createSystemdService.js

@@ -0,0 +1,74 @@
+import { z } from "zod";
+import { getExecutor } from "../executorInstance.js";
+import { saveLog } from "../logStore.js";
+export const createSystemdServiceTool = {
+    name: "createSystemdService",
+    description: "Create a systemd service unit for zapret2 on Linux desktop systems. Generates /etc/systemd/system/zapret2.service, runs daemon-reload, and optionally enables the service for autostart. Requires systemd — use detectSystem first to verify.",
+    schema: z.object({
+        enable: z.boolean().default(true).describe("Enable service for autostart (default: true)"),
+    }),
+    handler: async (args) => {
+        const enable = args.enable !== false;
+        const unitContent = `[Unit]
+Description=zapret2 network packet processing service
+After=network-online.target
+Wants=network-online.target
+
+[Service]
+Type=forking
+ExecStart=/opt/zapret2/init.d/sysv/zapret2 start
+ExecStop=/opt/zapret2/init.d/sysv/zapret2 stop
+ExecReload=/opt/zapret2/init.d/sysv/zapret2 restart
+RemainAfterExit=yes
+Restart=on-failure
+RestartSec=5
+
+[Install]
+WantedBy=multi-user.target`;
+        const b64Unit = Buffer.from(unitContent).toString("base64");
+        const script = `
+      set -e
+
+      if ! command -v systemctl >/dev/null 2>&1; then
+        echo "ERROR: systemctl not found. This tool requires systemd."
+        exit 1
+      fi
+
+      if ! systemctl --version >/dev/null 2>&1; then
+        echo "ERROR: systemd is not running."
+        exit 1
+      fi
+
+      if [ ! -d /opt/zapret2 ]; then
+        echo "ERROR: /opt/zapret2 not found. Run installZapret first."
+        exit 1
+      fi
+
+      # Write unit file
+      printf '%s' '${b64Unit}' | base64 -d > /etc/systemd/system/zapret2.service
+
+      systemctl daemon-reload
+
+      ${enable ? 'systemctl enable zapret2.service' : 'echo "Service not enabled (enable=false)"'}
+
+      echo "UNIT_CREATED"
+      echo "Path: /etc/systemd/system/zapret2.service"
+      echo "Enabled: ${enable}"
+      systemctl status zapret2.service --no-pager 2>&1 || true
+    `;
+        try {
+            const { stdout, stderr } = await getExecutor().exec(script, 30000);
+            const output = (stdout + stderr).trim();
+            saveLog("service", output, { action: "createSystemdService", enable: String(enable) });
+            return { content: [{ type: "text", text: output }] };
+        }
+        catch (err) {
+            const e = err;
+            return {
+                content: [{ type: "text", text: `Error: ${e.stderr || e.stdout || e.error?.message || "unknown error"}` }],
+                isError: true,
+            };
+        }
+    },
+};
+//# sourceMappingURL=createSystemdService.js.map

package/build/tools/createSystemdService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"createSystemdService.js","sourceRoot":"","sources":["../../src/tools/createSystemdService.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAEzC,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,IAAI,EAAE,sBAAsB;IAC5B,WAAW,EAAE,+OAA+O;IAC5P,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,8CAA8C,CAAC;KAC3F,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,IAA0B,EAAE,EAAE;QAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC;QAErC,MAAM,WAAW,GAAG;;;;;;;;;;;;;;;2BAeG,CAAC;QAExB,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAE5D,MAAM,MAAM,GAAG;;;;;;;;;;;;;;;;;;;qBAmBE,OAAO;;;;QAIpB,MAAM,CAAC,CAAC,CAAC,kCAAkC,CAAC,CAAC,CAAC,2CAA2C;;;;uBAI1E,MAAM;;KAExB,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,WAAW,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YACnE,MAAM,MAAM,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;YAExC,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,sBAAsB,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAEvF,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QAChE,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,CAAC,GAAG,GAA0D,CAAC;YACrE,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,EAAE,OAAO,IAAI,eAAe,EAAE,EAAE,CAAC;gBACnH,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC;CACF,CAAC"}

package/build/tools/detectSystem.d.ts

@@ -0,0 +1,19 @@
+import { z } from "zod";
+export declare const detectSystemTool: {
+    name: string;
+    description: string;
+    schema: z.ZodObject<{}, "strip", z.ZodTypeAny, {}, {}>;
+    handler: () => Promise<{
+        content: {
+            type: "text";
+            text: string;
+        }[];
+        isError?: undefined;
+    } | {
+        content: {
+            type: "text";
+            text: string;
+        }[];
+        isError: boolean;
+    }>;
+};

package/build/tools/detectSystem.js

@@ -0,0 +1,89 @@
+import { z } from "zod";
+import { getExecutor } from "../executorInstance.js";
+export const detectSystemTool = {
+    name: "detectSystem",
+    description: "Detect the target system environment: OS (id, version, pretty name), CPU architecture, init system (systemd/procd/sysv), default WAN interface, DNS resolvers, NFQUEUE kernel module availability, and whether running inside a container. Use this as a first step to determine which workflow (router vs desktop) to follow.",
+    schema: z.object({}),
+    handler: async () => {
+        const script = `
+      # OS detection
+      OS_ID="unknown"
+      OS_VERSION=""
+      OS_PRETTY=""
+      if [ -f /etc/os-release ]; then
+        OS_ID=$(. /etc/os-release && echo "\${ID:-unknown}")
+        OS_VERSION=$(. /etc/os-release && echo "\${VERSION_ID:-}")
+        OS_PRETTY=$(. /etc/os-release && echo "\${PRETTY_NAME:-}")
+      fi
+
+      ARCH=$(uname -m)
+
+      # Init system
+      INIT_SYSTEM="unknown"
+      if command -v systemctl >/dev/null 2>&1 && systemctl --version >/dev/null 2>&1; then
+        INIT_SYSTEM="systemd"
+      elif [ -d /etc/rc.d ] || [ -f /etc/init.d/boot ]; then
+        INIT_SYSTEM="procd"
+      else
+        INIT_SYSTEM="sysv"
+      fi
+
+      # WAN interface
+      WAN_IFACE=$(ip route get 8.8.8.8 2>/dev/null | awk '/dev/{for(i=1;i<=NF;i++){if($i=="dev"){print $(i+1);exit}}}')
+      WAN_IFACE=\${WAN_IFACE:-""}
+
+      # DNS resolvers
+      DNS_RESOLVERS=""
+      if [ -f /etc/resolv.conf ]; then
+        DNS_RESOLVERS=$(awk '/^nameserver/{printf "%s,", $2}' /etc/resolv.conf | sed 's/,$//')
+      fi
+
+      # NFQUEUE kernel module
+      NFQUEUE_MODULE="false"
+      if modinfo xt_NFQUEUE >/dev/null 2>&1 || modinfo nfnetlink_queue >/dev/null 2>&1; then
+        NFQUEUE_MODULE="true"
+      fi
+
+      # Container detection
+      IN_CONTAINER="false"
+      if [ -f /.dockerenv ] || grep -q 'docker\\|lxc\\|containerd' /proc/1/cgroup 2>/dev/null; then
+        IN_CONTAINER="true"
+      fi
+
+      # systemd-resolved detection
+      RESOLVED_ACTIVE="false"
+      if command -v systemctl >/dev/null 2>&1 && systemctl is-active systemd-resolved >/dev/null 2>&1; then
+        RESOLVED_ACTIVE="true"
+      fi
+
+      cat <<EOJSON
+{
+  "os": {
+    "id": "$OS_ID",
+    "version": "$OS_VERSION",
+    "pretty": "$OS_PRETTY"
+  },
+  "arch": "$ARCH",
+  "initSystem": "$INIT_SYSTEM",
+  "wanInterface": "$WAN_IFACE",
+  "dnsResolvers": "$DNS_RESOLVERS",
+  "nfqueueModule": $NFQUEUE_MODULE,
+  "inContainer": $IN_CONTAINER,
+  "systemdResolved": $RESOLVED_ACTIVE
+}
+EOJSON
+    `;
+        try {
+            const { stdout } = await getExecutor().exec(script, 10000);
+            return { content: [{ type: "text", text: stdout.trim() }] };
+        }
+        catch (err) {
+            const e = err;
+            return {
+                content: [{ type: "text", text: `Error: ${e.stderr || e.error?.message || "unknown error"}` }],
+                isError: true,
+            };
+        }
+    },
+};
+//# sourceMappingURL=detectSystem.js.map

package/build/tools/detectSystem.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"detectSystem.js","sourceRoot":"","sources":["../../src/tools/detectSystem.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAErD,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,IAAI,EAAE,cAAc;IACpB,WAAW,EAAE,gUAAgU;IAC7U,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;IACpB,OAAO,EAAE,KAAK,IAAI,EAAE;QAClB,MAAM,MAAM,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAmEd,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,WAAW,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YAC3D,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;QACvE,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,CAAC,GAAG,GAA0D,CAAC;YACrE,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,EAAE,OAAO,IAAI,eAAe,EAAE,EAAE,CAAC;gBACvG,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC;CACF,CAAC"}

package/build/tools/getConfig.d.ts

@@ -0,0 +1,27 @@
+import { z } from "zod";
+export declare const getConfigTool: {
+    name: string;
+    description: string;
+    schema: z.ZodObject<{
+        key: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        key?: string | undefined;
+    }, {
+        key?: string | undefined;
+    }>;
+    handler: (args: {
+        key?: string;
+    }) => Promise<{
+        content: {
+            type: "text";
+            text: string;
+        }[];
+        isError?: undefined;
+    } | {
+        content: {
+            type: "text";
+            text: string;
+        }[];
+        isError: boolean;
+    }>;
+};

package/build/tools/getConfig.js

@@ -0,0 +1,30 @@
+import { z } from "zod";
+import { getExecutor } from "../executorInstance.js";
+export const getConfigTool = {
+    name: "getConfig",
+    description: "Read zapret2 configuration from /opt/zapret2/config. Optionally filter by a specific key. Common keys: NFQWS2_ENABLE, NFQWS2_OPT, MODE, FWTYPE.",
+    schema: z.object({
+        key: z.string().optional().describe("Optional config key to read (e.g. NFQWS2_ENABLE, NFQWS2_OPT). If omitted, returns full config."),
+    }),
+    handler: async (args) => {
+        try {
+            let command;
+            if (args.key) {
+                command = `grep -E '^${args.key}=' /opt/zapret2/config || echo "Key '${args.key}' not found"`;
+            }
+            else {
+                command = "cat /opt/zapret2/config";
+            }
+            const { stdout } = await getExecutor().exec(command);
+            return { content: [{ type: "text", text: stdout.trim() }] };
+        }
+        catch (err) {
+            const e = err;
+            return {
+                content: [{ type: "text", text: `Error: ${e.stderr || e.error?.message || "unknown error"}` }],
+                isError: true,
+            };
+        }
+    },
+};
+//# sourceMappingURL=getConfig.js.map

package/build/tools/getConfig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getConfig.js","sourceRoot":"","sources":["../../src/tools/getConfig.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAErD,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,IAAI,EAAE,WAAW;IACjB,WAAW,EAAE,iJAAiJ;IAC9J,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gGAAgG,CAAC;KACtI,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,IAAsB,EAAE,EAAE;QACxC,IAAI,CAAC;YACH,IAAI,OAAe,CAAC;YACpB,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;gBACb,OAAO,GAAG,aAAa,IAAI,CAAC,GAAG,wCAAwC,IAAI,CAAC,GAAG,cAAc,CAAC;YAChG,CAAC;iBAAM,CAAC;gBACN,OAAO,GAAG,yBAAyB,CAAC;YACtC,CAAC;YACD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,WAAW,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACrD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;QACvE,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,CAAC,GAAG,GAA0D,CAAC;YACrE,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,EAAE,OAAO,IAAI,eAAe,EAAE,EAAE,CAAC;gBACvG,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC;CACF,CAAC"}

package/build/tools/getStatus.d.ts

@@ -0,0 +1,19 @@
+import { z } from "zod";
+export declare const getStatusTool: {
+    name: string;
+    description: string;
+    schema: z.ZodObject<{}, "strip", z.ZodTypeAny, {}, {}>;
+    handler: () => Promise<{
+        content: {
+            type: "text";
+            text: string;
+        }[];
+        isError?: undefined;
+    } | {
+        content: {
+            type: "text";
+            text: string;
+        }[];
+        isError: boolean;
+    }>;
+};

package/build/tools/getStatus.js

@@ -0,0 +1,35 @@
+import { z } from "zod";
+import { getExecutor } from "../executorInstance.js";
+export const getStatusTool = {
+    name: "getStatus",
+    description: "Get zapret2 service status: running state, PID, nftables rules count, nfqws2 enabled flag. Use this first to check if zapret2 is running before making changes.",
+    schema: z.object({}),
+    handler: async () => {
+        const script = `
+      PID=$(pgrep -x nfqws2 2>/dev/null || echo "")
+      RUNNING=false
+      if [ -n "$PID" ]; then RUNNING=true; fi
+
+      NFT_COUNT=0
+      if command -v nft >/dev/null 2>&1; then
+        NFT_COUNT=$(nft list ruleset 2>/dev/null | grep -c zapret 2>/dev/null || echo 0)
+      fi
+
+      ENABLED=$(grep -E '^NFQWS2_ENABLE=' /opt/zapret2/config 2>/dev/null | cut -d= -f2 || echo "unknown")
+
+      echo "{\\"running\\": $RUNNING, \\"pid\\": \\"$PID\\", \\"nftRulesCount\\": $NFT_COUNT, \\"nfqws2Enabled\\": \\"$ENABLED\\"}"
+    `;
+        try {
+            const { stdout } = await getExecutor().exec(script);
+            return { content: [{ type: "text", text: stdout.trim() }] };
+        }
+        catch (err) {
+            const e = err;
+            return {
+                content: [{ type: "text", text: `Error: ${e.stderr || e.error?.message || "unknown error"}` }],
+                isError: true,
+            };
+        }
+    },
+};
+//# sourceMappingURL=getStatus.js.map

package/build/tools/getStatus.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getStatus.js","sourceRoot":"","sources":["../../src/tools/getStatus.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAErD,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,IAAI,EAAE,WAAW;IACjB,WAAW,EAAE,iKAAiK;IAC9K,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;IACpB,OAAO,EAAE,KAAK,IAAI,EAAE;QAClB,MAAM,MAAM,GAAG;;;;;;;;;;;;;KAad,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,WAAW,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACpD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;QACvE,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,CAAC,GAAG,GAA0D,CAAC;YACrE,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,EAAE,OAAO,IAAI,eAAe,EAAE,EAAE,CAAC;gBACvG,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC;CACF,CAAC"}

package/build/tools/installZapret.d.ts

@@ -0,0 +1,31 @@
+import { z } from "zod";
+export declare const installZapretTool: {
+    name: string;
+    description: string;
+    schema: z.ZodObject<{
+        version: z.ZodDefault<z.ZodString>;
+        force: z.ZodDefault<z.ZodBoolean>;
+    }, "strip", z.ZodTypeAny, {
+        version: string;
+        force: boolean;
+    }, {
+        version?: string | undefined;
+        force?: boolean | undefined;
+    }>;
+    handler: (args: {
+        version?: string;
+        force?: boolean;
+    }) => Promise<{
+        content: {
+            type: "text";
+            text: string;
+        }[];
+        isError?: undefined;
+    } | {
+        content: {
+            type: "text";
+            text: string;
+        }[];
+        isError: boolean;
+    }>;
+};

package/build/tools/installZapret.js

@@ -0,0 +1,84 @@
+import { z } from "zod";
+import { getExecutor } from "../executorInstance.js";
+import { saveLog } from "../logStore.js";
+export const installZapretTool = {
+    name: "installZapret",
+    description: "Install zapret2 from scratch: clone repo, download binaries from GitHub releases, run install_bin.sh, create base config. Skips interactive install_easy.sh. Run checkPrerequisites first. After install, configure with updateConfig and startService.",
+    schema: z.object({
+        version: z.string().default("v0.9.4.1").describe("zapret2 release version (default: v0.9.4.1)"),
+        force: z.boolean().default(false).describe("Force reinstall even if /opt/zapret2 already exists"),
+    }),
+    handler: async (args) => {
+        const version = args.version || "v0.9.4.1";
+        const force = args.force || false;
+        const script = `
+      set -e
+
+      if [ -d "/opt/zapret2/.git" ] && [ "${force}" != "true" ]; then
+        echo "ALREADY_INSTALLED"
+        exit 0
+      fi
+
+      # Clone repo
+      if [ ! -d "/opt/zapret2/.git" ]; then
+        rm -rf /opt/zapret2/*
+        cd /opt && git clone --depth 1 https://github.com/bol-van/zapret2.git zapret2
+      fi
+
+      # Download and extract binaries
+      ARCHIVE="zapret2-${version}.tar.gz"
+      cd /tmp
+      curl -sLO "https://github.com/bol-van/zapret2/releases/download/${version}/$ARCHIVE"
+      tar xzf "$ARCHIVE"
+      EXTRACT_DIR=$(echo "$ARCHIVE" | sed 's/.tar.gz//')
+      cp -r "$EXTRACT_DIR/binaries/"* /opt/zapret2/binaries/
+      rm -rf "$EXTRACT_DIR" "$ARCHIVE"
+
+      # Install binaries
+      cd /opt/zapret2 && sh install_bin.sh
+
+      # Create base config if missing
+      if [ ! -f /opt/zapret2/config ]; then
+        WAN_IFACE=$(ip route get 8.8.8.8 2>/dev/null | awk '/dev/{for(i=1;i<=NF;i++){if($i=="dev"){print $(i+1);exit}}}')
+        WAN_IFACE=\${WAN_IFACE:-}
+        printf '%s\\n' \
+          "FWTYPE=nftables" \
+          "MODE=nfqws2" \
+          "NFQWS2_ENABLE=0" \
+          'NFQWS2_OPT="--payload=http_req --lua-desync=fake"' \
+          "FLOWOFFLOAD=none" \
+          "IFACE_WAN=$WAN_IFACE" \
+          "IFACE_LAN=" \
+          "DISABLE_IPV6=1" \
+          > /opt/zapret2/config
+      fi
+
+      echo "INSTALL_OK"
+      echo "Version: ${version}"
+      echo "Binary: $(ls -la /opt/zapret2/nfqws2 2>/dev/null || echo 'not found')"
+    `;
+        try {
+            const { stdout, stderr } = await getExecutor().exec(script, 120000);
+            const output = (stdout + stderr).trim();
+            if (output.startsWith("ALREADY_INSTALLED")) {
+                return {
+                    content: [{ type: "text", text: "zapret2 is already installed at /opt/zapret2. Use force=true to reinstall." }],
+                };
+            }
+            saveLog("service", output, { action: "install", version });
+            return { content: [{ type: "text", text: output }] };
+        }
+        catch (err) {
+            const e = err;
+            const output = (e.stdout || "") + (e.stderr || "");
+            if (output) {
+                saveLog("service", output, { action: "install", version, error: "true" });
+            }
+            return {
+                content: [{ type: "text", text: `Error installing zapret2: ${output || e.error?.message || "unknown error"}` }],
+                isError: true,
+            };
+        }
+    },
+};
+//# sourceMappingURL=installZapret.js.map

package/build/tools/installZapret.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"installZapret.js","sourceRoot":"","sources":["../../src/tools/installZapret.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAEzC,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,IAAI,EAAE,eAAe;IACrB,WAAW,EAAE,yPAAyP;IACtQ,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,6CAA6C,CAAC;QAC/F,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,qDAAqD,CAAC;KAClG,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,IAA2C,EAAE,EAAE;QAC7D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,UAAU,CAAC;QAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC;QAElC,MAAM,MAAM,GAAG;;;4CAGyB,KAAK;;;;;;;;;;;;yBAYxB,OAAO;;wEAEwC,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;uBA0BxD,OAAO;;KAEzB,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,WAAW,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YACpE,MAAM,MAAM,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;YAExC,IAAI,MAAM,CAAC,UAAU,CAAC,mBAAmB,CAAC,EAAE,CAAC;gBAC3C,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,4EAA4E,EAAE,CAAC;iBACzH,CAAC;YACJ,CAAC;YAED,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;YAC3D,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QAChE,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,CAAC,GAAG,GAA0D,CAAC;YACrE,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;YACnD,IAAI,MAAM,EAAE,CAAC;gBACX,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;YAC5E,CAAC;YACD,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,6BAA6B,MAAM,IAAI,CAAC,CAAC,KAAK,EAAE,OAAO,IAAI,eAAe,EAAE,EAAE,CAAC;gBACxH,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC;CACF,CAAC"}

package/build/tools/restartService.d.ts

@@ -0,0 +1,19 @@
+import { z } from "zod";
+export declare const restartServiceTool: {
+    name: string;
+    description: string;
+    schema: z.ZodObject<{}, "strip", z.ZodTypeAny, {}, {}>;
+    handler: () => Promise<{
+        content: {
+            type: "text";
+            text: string;
+        }[];
+        isError?: undefined;
+    } | {
+        content: {
+            type: "text";
+            text: string;
+        }[];
+        isError: boolean;
+    }>;
+};

package/build/tools/restartService.js

@@ -0,0 +1,24 @@
+import { z } from "zod";
+import { getExecutor } from "../executorInstance.js";
+import { saveLog } from "../logStore.js";
+export const restartServiceTool = {
+    name: "restartService",
+    description: "Restart zapret2 service (nfqws2 daemon). Logs saved to resources. Use after updateConfig to apply changes.",
+    schema: z.object({}),
+    handler: async () => {
+        try {
+            const { stdout, stderr } = await getExecutor().exec("/opt/zapret2/init.d/sysv/zapret2 restart");
+            const output = (stdout + stderr).trim() || "Service restarted";
+            saveLog("service", output, { action: "restart" });
+            return { content: [{ type: "text", text: output }] };
+        }
+        catch (err) {
+            const e = err;
+            return {
+                content: [{ type: "text", text: `Error: ${(e.stdout || "") + (e.stderr || "") || e.error?.message || "unknown error"}` }],
+                isError: true,
+            };
+        }
+    },
+};
+//# sourceMappingURL=restartService.js.map

package/build/tools/restartService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"restartService.js","sourceRoot":"","sources":["../../src/tools/restartService.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAEzC,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,IAAI,EAAE,gBAAgB;IACtB,WAAW,EAAE,4GAA4G;IACzH,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;IACpB,OAAO,EAAE,KAAK,IAAI,EAAE;QAClB,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,WAAW,EAAE,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;YAChG,MAAM,MAAM,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,IAAI,mBAAmB,CAAC;YAC/D,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;YAClD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QAChE,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,CAAC,GAAG,GAA0D,CAAC;YACrE,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,OAAO,IAAI,eAAe,EAAE,EAAE,CAAC;gBAClI,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC;CACF,CAAC"}

package/build/tools/runBlockcheck.d.ts

@@ -0,0 +1,31 @@
+import { z } from "zod";
+export declare const runBlockcheckTool: {
+    name: string;
+    description: string;
+    schema: z.ZodObject<{
+        domain: z.ZodDefault<z.ZodString>;
+        scanLevel: z.ZodDefault<z.ZodEnum<["quick", "standard"]>>;
+    }, "strip", z.ZodTypeAny, {
+        domain: string;
+        scanLevel: "quick" | "standard";
+    }, {
+        domain?: string | undefined;
+        scanLevel?: "quick" | "standard" | undefined;
+    }>;
+    handler: (args: {
+        domain?: string;
+        scanLevel?: "quick" | "standard";
+    }) => Promise<{
+        content: {
+            type: "text";
+            text: string;
+        }[];
+        isError?: undefined;
+    } | {
+        content: {
+            type: "text";
+            text: string;
+        }[];
+        isError: boolean;
+    }>;
+};

package/build/tools/runBlockcheck.js

@@ -0,0 +1,44 @@
+import { z } from "zod";
+import { getExecutor } from "../executorInstance.js";
+import { saveLog } from "../logStore.js";
+export const runBlockcheckTool = {
+    name: "runBlockcheck",
+    description: "Run blockcheck2.sh to find working network strategies for a domain. Stops zapret2 before running, collects AVAILABLE results. Heavy operation (~5 min). Full log saved to resources. Apply results via updateConfig NFQWS2_OPT.",
+    schema: z.object({
+        domain: z.string().default("example.com").describe("Domain to test against (default: example.com)"),
+        scanLevel: z.enum(["quick", "standard"]).default("quick").describe("Scan depth: quick or standard (default: quick)"),
+    }),
+    handler: async (args) => {
+        const domain = args.domain || "example.com";
+        const scanLevel = args.scanLevel || "quick";
+        const scanNum = scanLevel === "quick" ? "1" : "2";
+        const script = `
+      /opt/zapret2/init.d/sysv/zapret2 stop 2>/dev/null || true
+
+      printf '%s\\n' "${domain}" "${scanNum}" "Y" | /opt/zapret2/blockcheck2.sh 2>&1
+    `;
+        try {
+            const { stdout } = await getExecutor().exec(script, 300000);
+            const fullOutput = stdout.trim();
+            const ts = saveLog("blockcheck", fullOutput, { domain, scanLevel });
+            const filtered = fullOutput
+                .split("\n")
+                .filter((line) => /AVAILABLE|summary|strategy|nfqws2/i.test(line))
+                .join("\n") || "No AVAILABLE strategies found";
+            const response = `${filtered}\n\nFull log: zapret2://logs/blockcheck/${ts}`;
+            return { content: [{ type: "text", text: response }] };
+        }
+        catch (err) {
+            const e = err;
+            const output = (e.stdout || "") + (e.stderr || "");
+            if (output) {
+                saveLog("blockcheck", output, { domain, scanLevel, error: "true" });
+            }
+            return {
+                content: [{ type: "text", text: `Error running blockcheck2: ${output || e.error?.message || "unknown error"}` }],
+                isError: true,
+            };
+        }
+    },
+};
+//# sourceMappingURL=runBlockcheck.js.map

package/build/tools/runBlockcheck.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runBlockcheck.js","sourceRoot":"","sources":["../../src/tools/runBlockcheck.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAEzC,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,IAAI,EAAE,eAAe;IACrB,WAAW,EAAE,iOAAiO;IAC9O,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,+CAA+C,CAAC;QACnG,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,gDAAgD,CAAC;KACrH,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,IAA2D,EAAE,EAAE;QAC7E,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,aAAa,CAAC;QAC5C,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,OAAO,CAAC;QAE5C,MAAM,OAAO,GAAG,SAAS,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;QAElD,MAAM,MAAM,GAAG;;;wBAGK,MAAM,MAAM,OAAO;KACtC,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,WAAW,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAC5D,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;YAEjC,MAAM,EAAE,GAAG,OAAO,CAAC,YAAY,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;YAEpE,MAAM,QAAQ,GAAG,UAAU;iBACxB,KAAK,CAAC,IAAI,CAAC;iBACX,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,oCAAoC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;iBACjE,IAAI,CAAC,IAAI,CAAC,IAAI,+BAA+B,CAAC;YAEjD,MAAM,QAAQ,GAAG,GAAG,QAAQ,2CAA2C,EAAE,EAAE,CAAC;YAC5E,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;QAClE,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,CAAC,GAAG,GAA0D,CAAC;YACrE,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;YAEnD,IAAI,MAAM,EAAE,CAAC;gBACX,OAAO,CAAC,YAAY,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;YACtE,CAAC;YAED,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,8BAA8B,MAAM,IAAI,CAAC,CAAC,KAAK,EAAE,OAAO,IAAI,eAAe,EAAE,EAAE,CAAC;gBACzH,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC;CACF,CAAC"}

package/build/tools/startService.d.ts

@@ -0,0 +1,19 @@
+import { z } from "zod";
+export declare const startServiceTool: {
+    name: string;
+    description: string;
+    schema: z.ZodObject<{}, "strip", z.ZodTypeAny, {}, {}>;
+    handler: () => Promise<{
+        content: {
+            type: "text";
+            text: string;
+        }[];
+        isError?: undefined;
+    } | {
+        content: {
+            type: "text";
+            text: string;
+        }[];
+        isError: boolean;
+    }>;
+};

package/build/tools/startService.js

@@ -0,0 +1,24 @@
+import { z } from "zod";
+import { getExecutor } from "../executorInstance.js";
+import { saveLog } from "../logStore.js";
+export const startServiceTool = {
+    name: "startService",
+    description: "Start zapret2 service (nfqws2 daemon). Logs saved to resources. After starting, use verifyBypass to confirm.",
+    schema: z.object({}),
+    handler: async () => {
+        try {
+            const { stdout, stderr } = await getExecutor().exec("/opt/zapret2/init.d/sysv/zapret2 start");
+            const output = (stdout + stderr).trim() || "Service started";
+            saveLog("service", output, { action: "start" });
+            return { content: [{ type: "text", text: output }] };
+        }
+        catch (err) {
+            const e = err;
+            return {
+                content: [{ type: "text", text: `Error: ${(e.stdout || "") + (e.stderr || "") || e.error?.message || "unknown error"}` }],
+                isError: true,
+            };
+        }
+    },
+};
+//# sourceMappingURL=startService.js.map

package/build/tools/startService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"startService.js","sourceRoot":"","sources":["../../src/tools/startService.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAEzC,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,IAAI,EAAE,cAAc;IACpB,WAAW,EAAE,8GAA8G;IAC3H,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;IACpB,OAAO,EAAE,KAAK,IAAI,EAAE;QAClB,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,WAAW,EAAE,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;YAC9F,MAAM,MAAM,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,IAAI,iBAAiB,CAAC;YAC7D,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;YAChD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QAChE,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,CAAC,GAAG,GAA0D,CAAC;YACrE,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,OAAO,IAAI,eAAe,EAAE,EAAE,CAAC;gBAClI,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC;CACF,CAAC"}

package/build/tools/stopService.d.ts

@@ -0,0 +1,19 @@
+import { z } from "zod";
+export declare const stopServiceTool: {
+    name: string;
+    description: string;
+    schema: z.ZodObject<{}, "strip", z.ZodTypeAny, {}, {}>;
+    handler: () => Promise<{
+        content: {
+            type: "text";
+            text: string;
+        }[];
+        isError?: undefined;
+    } | {
+        content: {
+            type: "text";
+            text: string;
+        }[];
+        isError: boolean;
+    }>;
+};