zapret2-mcp 0.3.0

package/build/tools/stopService.js

@@ -0,0 +1,24 @@
+import { z } from "zod";
+import { getExecutor } from "../executorInstance.js";
+import { saveLog } from "../logStore.js";
+export const stopServiceTool = {
+    name: "stopService",
+    description: "Stop zapret2 service (nfqws2 daemon). Logs saved to resources. Required before runBlockcheck.",
+    schema: z.object({}),
+    handler: async () => {
+        try {
+            const { stdout, stderr } = await getExecutor().exec("/opt/zapret2/init.d/sysv/zapret2 stop");
+            const output = (stdout + stderr).trim() || "Service stopped";
+            saveLog("service", output, { action: "stop" });
+            return { content: [{ type: "text", text: output }] };
+        }
+        catch (err) {
+            const e = err;
+            return {
+                content: [{ type: "text", text: `Error: ${(e.stdout || "") + (e.stderr || "") || e.error?.message || "unknown error"}` }],
+                isError: true,
+            };
+        }
+    },
+};
+//# sourceMappingURL=stopService.js.map

package/build/tools/stopService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stopService.js","sourceRoot":"","sources":["../../src/tools/stopService.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAEzC,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,IAAI,EAAE,aAAa;IACnB,WAAW,EAAE,+FAA+F;IAC5G,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;IACpB,OAAO,EAAE,KAAK,IAAI,EAAE;QAClB,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,WAAW,EAAE,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;YAC7F,MAAM,MAAM,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,IAAI,iBAAiB,CAAC;YAC7D,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;YAC/C,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QAChE,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,CAAC,GAAG,GAA0D,CAAC;YACrE,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,OAAO,IAAI,eAAe,EAAE,EAAE,CAAC;gBAClI,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC;CACF,CAAC"}

package/build/tools/updateConfig.d.ts

@@ -0,0 +1,31 @@
+import { z } from "zod";
+export declare const updateConfigTool: {
+    name: string;
+    description: string;
+    schema: z.ZodObject<{
+        key: z.ZodString;
+        value: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        value: string;
+        key: string;
+    }, {
+        value: string;
+        key: string;
+    }>;
+    handler: (args: {
+        key: string;
+        value: string;
+    }) => Promise<{
+        content: {
+            type: "text";
+            text: string;
+        }[];
+        isError: boolean;
+    } | {
+        content: {
+            type: "text";
+            text: string;
+        }[];
+        isError?: undefined;
+    }>;
+};

package/build/tools/updateConfig.js

@@ -0,0 +1,50 @@
+import { z } from "zod";
+import { getExecutor } from "../executorInstance.js";
+import { saveLog } from "../logStore.js";
+export const updateConfigTool = {
+    name: "updateConfig",
+    description: "Update a parameter in zapret2 config (/opt/zapret2/config). Replaces the value of an existing key. Config snapshot saved to resources before change. Restart service to apply.",
+    schema: z.object({
+        key: z.string().describe("Config key to update (e.g. NFQWS2_ENABLE, NFQWS2_OPT)"),
+        value: z.string().describe("New value for the key"),
+    }),
+    handler: async (args) => {
+        const { key, value } = args;
+        const safeKey = key.replace(/[^A-Za-z0-9_]/g, "");
+        if (safeKey !== key) {
+            return {
+                content: [{ type: "text", text: "Error: key must contain only alphanumeric characters and underscores" }],
+                isError: true,
+            };
+        }
+        const b64Value = Buffer.from(value).toString("base64");
+        try {
+            // Snapshot config before change
+            const { stdout: configSnapshot } = await getExecutor().exec("cat /opt/zapret2/config");
+            saveLog("config", configSnapshot, { key: safeKey, value });
+            const script = `
+        VALUE=$(printf '%s' '${b64Value}' | base64 -d)
+        export VALUE
+        if grep -qE '^${safeKey}=' /opt/zapret2/config; then
+          awk -v key="${safeKey}" 'BEGIN{val=ENVIRON["VALUE"]} $0 ~ "^" key "=" {print key "=" val; next} {print}' /opt/zapret2/config > /opt/zapret2/config.tmp && mv /opt/zapret2/config.tmp /opt/zapret2/config
+          echo "Updated ${safeKey}:"
+          grep -E '^${safeKey}=' /opt/zapret2/config
+        else
+          printf '%s=%s\\n' '${safeKey}' "$VALUE" >> /opt/zapret2/config
+          echo "Added ${safeKey}:"
+          grep -E '^${safeKey}=' /opt/zapret2/config
+        fi
+      `;
+            const { stdout } = await getExecutor().exec(script);
+            return { content: [{ type: "text", text: stdout.trim() }] };
+        }
+        catch (err) {
+            const e = err;
+            return {
+                content: [{ type: "text", text: `Error: ${e.stderr || e.error?.message || "unknown error"}` }],
+                isError: true,
+            };
+        }
+    },
+};
+//# sourceMappingURL=updateConfig.js.map

package/build/tools/updateConfig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"updateConfig.js","sourceRoot":"","sources":["../../src/tools/updateConfig.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAEzC,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,IAAI,EAAE,cAAc;IACpB,WAAW,EAAE,gLAAgL;IAC7L,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uDAAuD,CAAC;QACjF,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uBAAuB,CAAC;KACpD,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,IAAoC,EAAE,EAAE;QACtD,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;QAE5B,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;QAClD,IAAI,OAAO,KAAK,GAAG,EAAE,CAAC;YACpB,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,sEAAsE,EAAE,CAAC;gBAClH,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAEvD,IAAI,CAAC;YACH,gCAAgC;YAChC,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,WAAW,EAAE,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;YACvF,OAAO,CAAC,QAAQ,EAAE,cAAc,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;YAE3D,MAAM,MAAM,GAAG;+BACU,QAAQ;;wBAEf,OAAO;wBACP,OAAO;0BACL,OAAO;sBACX,OAAO;;+BAEE,OAAO;wBACd,OAAO;sBACT,OAAO;;OAEtB,CAAC;YACF,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,WAAW,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACpD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;QACvE,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,CAAC,GAAG,GAA0D,CAAC;YACrE,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,EAAE,OAAO,IAAI,eAAe,EAAE,EAAE,CAAC;gBACvG,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC;CACF,CAAC"}

package/build/tools/verifyBypass.d.ts

@@ -0,0 +1,31 @@
+import { z } from "zod";
+export declare const verifyBypassTool: {
+    name: string;
+    description: string;
+    schema: z.ZodObject<{
+        domain: z.ZodDefault<z.ZodString>;
+        timeout: z.ZodDefault<z.ZodNumber>;
+    }, "strip", z.ZodTypeAny, {
+        domain: string;
+        timeout: number;
+    }, {
+        domain?: string | undefined;
+        timeout?: number | undefined;
+    }>;
+    handler: (args: {
+        domain?: string;
+        timeout?: number;
+    }) => Promise<{
+        content: {
+            type: "text";
+            text: string;
+        }[];
+        isError?: undefined;
+    } | {
+        content: {
+            type: "text";
+            text: string;
+        }[];
+        isError: boolean;
+    }>;
+};

package/build/tools/verifyBypass.js

@@ -0,0 +1,62 @@
+import { z } from "zod";
+import { getExecutor } from "../executorInstance.js";
+export const verifyBypassTool = {
+    name: "verifyBypass",
+    description: "Verify network connectivity: DNS resolution, HTTP request, and nfqws2 running status for a given domain. Use after startService or restartService to confirm zapret2 is working.",
+    schema: z.object({
+        domain: z.string().default("example.com").describe("Domain to verify bypass for (default: example.com)"),
+        timeout: z.number().default(10).describe("HTTP request timeout in seconds (default: 10)"),
+    }),
+    handler: async (args) => {
+        const domain = args.domain || "example.com";
+        const timeout = args.timeout || 10;
+        const script = `
+      DNS_RESOLVED="false"
+      DNS_IP=""
+      IP=$(nslookup "${domain}" 2>/dev/null | grep -A1 "Name:" | grep "Address:" | head -1 | awk '{print $2}')
+      if [ -z "$IP" ]; then
+        IP=$(getent hosts "${domain}" 2>/dev/null | awk '{print $1}' | head -1)
+      fi
+      if [ -n "$IP" ]; then
+        DNS_RESOLVED="true"
+        DNS_IP="$IP"
+      fi
+
+      HTTP_CODE="0"
+      CURL_EXIT="0"
+      if command -v curl >/dev/null 2>&1; then
+        HTTP_CODE=$(curl -sL -o /dev/null -w '%{http_code}' --max-time ${timeout} "https://${domain}/" 2>/dev/null || true)
+        CURL_EXIT=$?
+        if [ -z "$HTTP_CODE" ]; then HTTP_CODE="0"; fi
+      fi
+
+      ZAPRET_RUNNING="false"
+      if pgrep -x nfqws2 >/dev/null 2>&1; then
+        ZAPRET_RUNNING="true"
+      fi
+
+      cat <<EOJSON
+{
+  "domain": "${domain}",
+  "dnsResolved": $DNS_RESOLVED,
+  "dnsIp": "$DNS_IP",
+  "httpCode": "$HTTP_CODE",
+  "curlExit": "$CURL_EXIT",
+  "zapretRunning": $ZAPRET_RUNNING
+}
+EOJSON
+    `;
+        try {
+            const { stdout } = await getExecutor().exec(script, (timeout + 5) * 1000);
+            return { content: [{ type: "text", text: stdout.trim() }] };
+        }
+        catch (err) {
+            const e = err;
+            return {
+                content: [{ type: "text", text: `Error: ${e.stderr || e.error?.message || "unknown error"}` }],
+                isError: true,
+            };
+        }
+    },
+};
+//# sourceMappingURL=verifyBypass.js.map

package/build/tools/verifyBypass.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifyBypass.js","sourceRoot":"","sources":["../../src/tools/verifyBypass.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAErD,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,IAAI,EAAE,cAAc;IACpB,WAAW,EAAE,kLAAkL;IAC/L,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,oDAAoD,CAAC;QACxG,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,+CAA+C,CAAC;KAC1F,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,IAA2C,EAAE,EAAE;QAC7D,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,aAAa,CAAC;QAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;QAEnC,MAAM,MAAM,GAAG;;;uBAGI,MAAM;;6BAEA,MAAM;;;;;;;;;;yEAUsC,OAAO,aAAa,MAAM;;;;;;;;;;;;eAYpF,MAAM;;;;;;;;KAQhB,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,WAAW,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,OAAO,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YAC1E,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;QACvE,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,CAAC,GAAG,GAA0D,CAAC;YACrE,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,EAAE,OAAO,IAAI,eAAe,EAAE,EAAE,CAAC;gBACvG,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC;CACF,CAAC"}

package/package.json

@@ -0,0 +1,64 @@
+{
+  "name": "zapret2-mcp",
+  "version": "0.3.0",
+  "description": "MCP server for managing zapret2 network packet processing tool on OpenWrt routers and Linux desktops via Docker, SSH, or locally",
+  "license": "MIT",
+  "author": "Stanislav Zemlyakov",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/rcd27/zapret2-mcp.git"
+  },
+  "homepage": "https://github.com/rcd27/zapret2-mcp#readme",
+  "bugs": {
+    "url": "https://github.com/rcd27/zapret2-mcp/issues"
+  },
+  "type": "module",
+  "main": "build/index.js",
+  "bin": {
+    "zapret2-mcp": "build/index.js"
+  },
+  "files": [
+    "build",
+    "README.md",
+    "LICENSE",
+    "CHANGELOG.md"
+  ],
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "keywords": [
+    "mcp",
+    "mcp-server",
+    "model-context-protocol",
+    "zapret",
+    "zapret2",
+    "network-tools",
+    "packet-processing",
+    "openwrt",
+    "nfqws",
+    "nfqws2",
+    "ai-agent",
+    "llm-tools"
+  ],
+  "scripts": {
+    "build": "tsc && chmod 755 build/index.js",
+    "start": "node build/index.js",
+    "prestart": "npm run build",
+    "dev": "npx @modelcontextprotocol/inspector node build/index.js",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "test:integration": "npm run build && vitest run --config vitest.integration.config.ts",
+    "test:coverage": "vitest run --coverage",
+    "prepublishOnly": "npm run build && npm test"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.6.0",
+    "zod": "^3.24.0"
+  },
+  "devDependencies": {
+    "@types/node": "^22.0.0",
+    "@vitest/coverage-v8": "^4.0.18",
+    "typescript": "^5.7.0",
+    "vitest": "^4.0.18"
+  }
+}