SecOps-7/MikroDash v0.8.60

on GitHub

22 new RouterOS pages, a Tools page, and an assistant that reaches them

Twenty-two new pages for RouterOS menus MikroDash did not cover, a Tools page for
live diagnostics, and an AI Agent that can read and change all of them through the
same permissions, checks and audit trail as the forms.

New

• New pages: IP Pools, Address Lists, Interface Lists, Services, Certificates,
  Scripts, Scheduler, NTP Client, Clock, Logging, SNMP, Files, Routing Tables, Routing
  Rules, OSPF, IPsec, OpenVPN, VRRP, PPPoE Clients, DHCP Clients, DHCP Servers and
  Containers. Each lists its rows and, where RouterOS allows, adds, edits and removes
  them with undo. Each has its own toggle in Settings → Visible Pages.
• Tools page (in the sidebar below Devices): Ping, Traceroute, Torch and Bandwidth
  Test run from the selected router, with output shown as it arrives. Torch and Bandwidth
  Test need write access and are recorded in the audit trail.
• Containers can be started, stopped and removed from their page. Needs the RouterOS
  container package.
• Tables on the new pages, and IP Addresses, sort by clicking a header: ascending,
  descending, then back to the router's order. Rule lists where the first match wins keep
  the router's order and their reorder arrows instead.
• Key columns are coloured labels on the new pages: states such as bound or Full,
  rule actions, and yes/no flags such as disabled, dynamic and running.
• The AI Agent reaches every new page, can ping and traceroute from the router, and
  can propose page actions (container start/stop/remove, torch, bandwidth test, WAN lease
  renew/release, backups, package changes, firmware upgrade). Every action asks you
  first; reboots need the router's name typed back.
• The AI Agent sees more live data: WAN status, packages, router users, queues, logs,
  WiFi clients, connections, bandwidth, topology, WireGuard, PPP, BGP, CAPsMAN and DHCP
  networks.

Changed

• IP Addresses is now two tabs, IPv4 and IPv6, with sorting and coloured labels like
  the new pages. Its own poll-interval setting is gone (it reads every 60 s), and so is its
  old show/hide setting: if you had hidden it, hide it again in Settings → Visible Pages.
• Queues and Router Users now edit through the same form engine as the new pages, with
  undo and read-back checks.
• New pages open with data, read once when a router connects, like the older pages.
• Every new page has its own sidebar icon.
• Changes that could cut MikroDash off warn first: disabling the API service or its
  certificate, list memberships, routing rules, IPsec, tunnel default routes, interfaces
  MikroDash connects through (VETH, VRRP, tunnels) and the DHCP client holding the address
  MikroDash connects to.
• Code the router runs (scripts, scheduler, VRRP scripts, container images) can only
  be changed by a global administrator.
• Removing, disabling or unsetting FIB on a routing table that rules use asks first,
  naming how many rules would stop working.

Fixed

• An approved assistant edit no longer clears fields it did not name, and an edit it
  makes directly keeps the rest of the row instead of being refused by the router.
• The assistant can no longer drop a condition it invented. A field the page does not
  have is refused rather than silently left out, which could turn a narrow firewall rule
  into a broad one.
• An assistant proposal that trips a safety check shows the warning in the dialog.
• Package actions read the router again before acting, so a schedule after an update
  no longer targets the wrong package or reboots for nothing.
• Audit entries for refused edits name the row instead of leaving it blank.
• Undo is not offered for a removal that cannot be re-created.
• Form fields shown by a checkbox now appear when it is ticked.
• A WiFi frequency scan the router refuses now says so, instead of finishing as a scan
  that found nothing.
• New pages' menu entries open when clicked. They were reachable only by URL.
• BGP sessions on RouterOS 7 are read correctly by the routing collector.
• A saved poll interval is the one used, rather than being clamped to a narrower range.
• A router name in an assistant proposal cannot break out of its quotes (code scanning
  #162).

Internal

• New pages are declared once in internal/areas and generated by cmd/areagen, served
  by one collector.
• docs/mikromcp-parity.md maps every MikroMCP tool, held to the code by a test.
• Raw RouterOS command tools exist behind a global-admin gate and a setting that is off by
  default; they are not offered to the assistant.