@akms/mcp-ssh 0.1.8 → 0.1.9

package/CHANGELOG.md

@@ -2,6 +2,14 @@
 
 All notable changes to `@akms/mcp-ssh`. Dates are `YYYY-MM-DD`.
 
+## 0.1.9 — 2026-10-19
+
+### Changed
+
+- Load SSH and its crypto runtime on the first connection instead of during idle MCP startup or local configuration work. Direct, proxy and jump-host routes share the loaded client constructor.
+- Preserve shared connection attempts and reject a connection closed while the module was loading, before opening a proxy or network transport.
+- Document idle-memory behavior and direct Node launch as an alternative to a persistent npm wrapper.
+
 ## 0.1.8 — 2026-10-19
 
 ### Added

package/README.md

@@ -276,6 +276,14 @@ Rules are enforced inside `SshConnection.exec` and the SFTP operations — the l
 
 The file tools run with this server's own privileges on your machine, so `localPath` is guarded in both directions — but narrowly, covering **credentials** (`~/.ssh`, `authorized_keys`, private keys, `.pem`/`.key`, `~/.aws`, `~/.gnupg`, `~/.kube`, `~/.docker`, `.npmrc`, `.netrc`) and **files that define the guards** (`.claude*` / `.mcp.json` / `claude_desktop_config.json` — where this server's `SSH_*` variables live — plus autostart locations). `.env` uploads, `.bashrc` backups and cron fetches are normal deployment work and are allowed. Symlinks are resolved before matching, so a link into `~/.ssh` does not slip past.
 
+## Memory and process lifetime
+
+SSH and its crypto runtime load on the first connection instead of during idle MCP startup or local configuration work. The same loaded client supports direct, proxy and jump-host routes. Concurrent callers share the connection attempt, and disconnecting during module loading prevents a later transport from opening. The runtime stays loaded after first use; disconnecting a session closes its transport rather than unloading the module.
+
+Each configured host in each MCP client runs its own process. An `npx` registration also keeps an npm wrapper running. For a stable local/global installation, an entry can instead use the absolute Node executable as `command` and the installed package's absolute `lib/cli.js` path as its sole argument, retaining its existing `env`. Avoid paths inside npm's temporary execution cache. The configuration form continues to generate portable `npx` registrations and may restore that launch style when saving an edit.
+
+Restart MCP connections after updating to apply the new code. Compare process counts and Windows Private Bytes separately from resident memory (RSS), including npm wrappers in the total.
+
 ## 📄 Logging
 
 Everything goes to **stderr** (stdout is the MCP protocol channel). `SSH_MCP_LOG_LEVEL` picks the level — `silent` / `debug` / `info` / `warn` / `error`, default `info`. Guard rejections are logged at `warn` with the full command, and that log is the audit trail for what the agent tried; full command text is otherwise only logged at `debug`, while `password`, `passphrase`, `privateKey` and `token` meta keys are always masked.

package/lib/cli.cjs

@@ -9,7 +9,6 @@ var child_process = require('child_process');
 var crypto = require('crypto');
 var stream = require('stream');
 var string_decoder = require('string_decoder');
-var ssh2 = require('ssh2');
 var timers = require('timers');
 var util = require('util');
 var smolToml = require('smol-toml');
@@ -21,7 +20,6 @@ function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
 var fs7__default = /*#__PURE__*/_interopDefault(fs7);
 var os5__default = /*#__PURE__*/_interopDefault(os5);
 var path__default = /*#__PURE__*/_interopDefault(path);
-var ssh2__default = /*#__PURE__*/_interopDefault(ssh2);
 
 // src/_defs/defaults.ts
 var LOG_LEVEL_ENV = "SSH_MCP_LOG_LEVEL";
@@ -38,7 +36,7 @@ var CWD_MARKER = "__AKMS_SSH_CWD__";
 var MAX_DIRECTORY_ENTRIES = 1e3;
 var SERVER_NAME = "akms-mcp-ssh";
 var PACKAGE_NAME = "@akms/mcp-ssh";
-var SERVER_VERSION = "0.1.8";
+var SERVER_VERSION = "0.1.9";
 
 // src/_defs/command-rules.ts
 var CRITICAL_PATH_PATTERN = new RegExp(
@@ -1362,7 +1360,6 @@ var GuardRejectionError = class extends Error {
 };
 
 // src/modules/ssh/ssh-connection.ts
-var { Client } = ssh2__default.default;
 var OUTPUT_HARD_CAP_MULTIPLIER = 4;
 var PRIVATE_KEY_CACHE = /* @__PURE__ */ new Map();
 var WINDOWS_AGENT_PIPE = "\\\\.\\pipe\\openssh-ssh-agent";
@@ -1504,7 +1501,7 @@ function openProxyCommand(profile, hop) {
     }
   };
 }
-function openJumpTransport(profile, jump, proxy, onHostKeySeen) {
+function openJumpTransport(profile, jump, proxy, onHostKeySeen, Client) {
   const label = `${profile.name} jump host`;
   const endpoint = `${jump.username}@${jump.host}:${jump.port}`;
   const _logger = $logger.child({ context: "openJumpTransport", profile: profile.name, jump_host: jump.host });
@@ -1569,7 +1566,7 @@ function openJumpTransport(profile, jump, proxy, onHostKeySeen) {
     jumpClient.connect(jumpConfig);
   });
 }
-async function openTransport(profile, onJumpHostKeySeen) {
+async function openTransport(profile, onJumpHostKeySeen, Client) {
   let proxy = null;
   if (profile.proxyCommand != null) {
     proxy = openProxyCommand(profile, profile.jump ?? profile);
@@ -1578,7 +1575,7 @@ async function openTransport(profile, onJumpHostKeySeen) {
     return proxy;
   }
   try {
-    const jumpTransport = await openJumpTransport(profile, profile.jump, proxy, onJumpHostKeySeen);
+    const jumpTransport = await openJumpTransport(profile, profile.jump, proxy, onJumpHostKeySeen, Client);
     return jumpTransport;
   } catch (ex) {
     proxy?.close();
@@ -1642,6 +1639,11 @@ var SshConnection = class {
   get wasDropped() {
     return this.droppedAfterReady;
   }
+  assertNotDisposed() {
+    if (this.disposed == true) {
+      throw new Error(`ssh connection for '${this.profile.name}' has been closed; open a new session`);
+    }
+  }
   /**
    * Opens the connection, or joins the in-flight attempt when one is already running.
    *
@@ -1652,9 +1654,7 @@ var SshConnection = class {
    *                 unreachable, the handshake times out, or the carrier cannot be opened.
    */
   async connect(onProgress) {
-    if (this.disposed == true) {
-      throw new Error(`ssh connection for '${this.profile.name}' has been closed; open a new session`);
-    }
+    this.assertNotDisposed();
     if (this.client != null) {
       return;
     }
@@ -1673,12 +1673,14 @@ var SshConnection = class {
       this.observedFingerprint = fingerprint;
     });
     this.connecting = (async () => {
+      const { default: { Client } } = await import('ssh2');
+      this.assertNotDisposed();
       if (this.profile.jump != null || this.profile.proxyCommand != null) {
         onProgress?.("transport");
       }
       const transport = await openTransport(this.profile, (fingerprint) => {
         this.observedJumpFingerprint = fingerprint;
-      });
+      }, Client);
       if (this.disposed == true) {
         transport?.close();
         throw new Error(`ssh connection for '${this.profile.name}' was closed during the handshake`);