@jadchene/mcp-ssh-service 1.4.0 → 1.4.2

package/README.md

@@ -189,17 +189,31 @@ args = ["--config", "./config.json"]
 * `cd`
 * `execute_batch` [Auth Required if any sub-command is high-risk]
 
+### System (9)
+* `get_system_info`
+* `hostname`
+* `id`
+* `uname`
+* `uptime`
+* `free`
+* `env`
+* `pwd`
+* `cd`
+
 ### Shell & Basic (2)
 * `execute_command` [Auth Required, single command only]
 * `echo`
 
-### File Management (15)
+### File Management (18)
 * `upload_file` [Auth Required]
 * `download_file`
 * `ll`
 * `cat`
+* `head`
 * `tail`
+* `sed`
 * `grep`
+* `grep_r`
 * `edit_text_file` [Auth Required]
 * `touch`
 * `mkdir` [Auth Required]
@@ -218,12 +232,16 @@ args = ["--config", "./config.json"]
 * `git_branch`
 * `git_log`
 
-### Docker & Compose (21)
+### Docker & Compose (26)
 * `docker_compose_up` [Auth Required]
 * `docker_compose_down` [Auth Required]
 * `docker_compose_stop` [Auth Required]
 * `docker_compose_logs`
 * `docker_compose_restart` [Auth Required]
+* `docker_compose_pull` [Auth Required]
+* `docker_compose_ps`
+* `docker_compose_config`
+* `docker_compose_exec` [Auth Required]
 * `docker_ps`
 * `docker_images`
 * `docker_exec` [Auth Required]
@@ -240,13 +258,18 @@ args = ["--config", "./config.json"]
 * `docker_logs`
 * `docker_load` [Auth Required]
 * `docker_save` [Auth Required]
+* `docker_build` [Auth Required, supports `networkHost` for `--network=host`]
 
-### Service & Network (14)
+### Service & Network (18)
 * `systemctl_status`
 * `systemctl_restart` [Auth Required]
 * `systemctl_start` [Auth Required]
 * `systemctl_stop` [Auth Required]
+* `systemctl_enable` [Auth Required]
+* `systemctl_disable` [Auth Required]
 * `ip_addr`
+* `ip_route`
+* `mount`
 * `journalctl`
 * `firewall_cmd` [Auth Required, structured actions only]
 * `netstat` [uses `args: string[]`]
@@ -257,13 +280,18 @@ args = ["--config", "./config.json"]
 * `dig`
 * `curl_http` [Auth Required]
 
-### Stats & Process (13)
+### Stats & Process (19)
 * `nvidia_smi`
 * `ps`
 * `pgrep`
 * `kill_process` [Auth Required]
 * `df_h`
+* `df_inode`
 * `du_sh`
+* `which`
+* `lsof`
+* `file`
+* `stat`
 * `chmod` [Auth Required]
 * `chown` [Auth Required]
 * `ln` [Auth Required]
@@ -272,7 +300,7 @@ args = ["--config", "./config.json"]
 * `zip` [Auth Required]
 * `unzip` [Auth Required]
 
-Total: 79 tools.
+Total: 103 tools.
 
 ---
 

package/dist/tools/definitions.js

@@ -42,6 +42,36 @@ export const toolDefinitions = [
         description: 'System health check: Returns current user, system uptime, kernel, and memory.',
         inputSchema: baseParams()
     },
+    {
+        name: 'hostname',
+        description: 'Show the current host name.',
+        inputSchema: baseParams(grepParam)
+    },
+    {
+        name: 'id',
+        description: 'Show current user identity and group information.',
+        inputSchema: baseParams(grepParam)
+    },
+    {
+        name: 'uname',
+        description: 'Show kernel and operating system information.',
+        inputSchema: baseParams({ all: { type: 'boolean' }, ...grepParam })
+    },
+    {
+        name: 'uptime',
+        description: 'Show system uptime and load averages.',
+        inputSchema: baseParams(grepParam)
+    },
+    {
+        name: 'free',
+        description: 'Show memory usage in megabytes.',
+        inputSchema: baseParams(grepParam)
+    },
+    {
+        name: 'env',
+        description: 'Show environment variables visible to the remote session.',
+        inputSchema: baseParams(grepParam)
+    },
     {
         name: 'pwd',
         description: 'Current path: Returns the absolute path of the current directory on remote.',
@@ -108,23 +138,52 @@ export const toolDefinitions = [
     {
         name: 'll',
         description: 'Directory listing: Lists files in a directory with detailed information.',
-        inputSchema: baseParams({ ...cwdParam, ...grepParam })
+        inputSchema: baseParams({ ...cwdParam, all: { type: 'boolean' }, ...grepParam })
     },
     {
         name: 'cat',
         description: 'File reading: Reads text file content.',
         inputSchema: baseParams({ filePath: { type: 'string' }, ...grepParam }, ['filePath'])
     },
+    {
+        name: 'head',
+        description: 'File preview: Reads the first N lines of a file.',
+        inputSchema: baseParams({ filePath: { type: 'string' }, lines: { type: 'number' }, ...grepParam }, ['filePath'])
+    },
     {
         name: 'tail',
         description: 'Log inspection: Reads last N lines of a file.',
         inputSchema: baseParams({ filePath: { type: 'string' }, lines: { type: 'number' }, ...grepParam }, ['filePath'])
     },
+    {
+        name: 'sed',
+        description: 'Line range reading: Reads an inclusive line range from a text file.',
+        inputSchema: baseParams({
+            filePath: { type: 'string' },
+            startLine: { type: 'number' },
+            endLine: { type: 'number' },
+            ...grepParam
+        }, ['filePath', 'startLine', 'endLine'])
+    },
     {
         name: 'grep',
         description: 'Pattern search: Search for a regex pattern in a file.',
         inputSchema: baseParams({ filePath: { type: 'string' }, pattern: { type: 'string' }, ignoreCase: { type: 'boolean' } }, ['filePath', 'pattern'])
     },
+    {
+        name: 'grep_r',
+        description: 'Recursive pattern search: Search for a regex pattern across files under a directory tree.',
+        inputSchema: baseParams({
+            path: { type: 'string' },
+            pattern: { type: 'string' },
+            ignoreCase: { type: 'boolean' },
+            beforeContext: { type: 'number' },
+            afterContext: { type: 'number' },
+            context: { type: 'number' },
+            include: { type: 'array', items: { type: 'string' } },
+            excludeDir: { type: 'array', items: { type: 'string' } }
+        }, ['path', 'pattern'])
+    },
     {
         name: 'edit_text_file',
         description: 'File creation/overwrite: Completely replaces file content. REQUIRES CONFIRMATION.',
@@ -172,7 +231,14 @@ export const toolDefinitions = [
     {
         name: 'find',
         description: 'Search for files in a directory hierarchy.',
-        inputSchema: baseParams({ path: { type: 'string' }, name: { type: 'string' }, ...grepParam }, ['path'])
+        inputSchema: baseParams({
+            path: { type: 'string' },
+            name: { type: 'string' },
+            type: { type: 'string', enum: ['f', 'd', 'l'] },
+            maxDepth: { type: 'number' },
+            pathPattern: { type: 'string' },
+            ...grepParam
+        }, ['path'])
     },
     // --- Git ---
     {
@@ -231,6 +297,33 @@ export const toolDefinitions = [
         description: 'Restart compose stack. REQUIRES CONFIRMATION.',
         inputSchema: baseParams({ ...cwdParam, ...confirmationParams }, ['cwd'])
     },
+    {
+        name: 'docker_compose_pull',
+        description: 'Pull images defined by the compose stack. REQUIRES CONFIRMATION.',
+        inputSchema: baseParams({ ...cwdParam, service: { type: 'string' }, ...confirmationParams }, ['cwd'])
+    },
+    {
+        name: 'docker_compose_ps',
+        description: 'List compose services and their current state.',
+        inputSchema: baseParams({ ...cwdParam, service: { type: 'string' }, ...grepParam }, ['cwd'])
+    },
+    {
+        name: 'docker_compose_config',
+        description: 'Render the fully resolved compose configuration for inspection.',
+        inputSchema: baseParams({ ...cwdParam, ...grepParam }, ['cwd'])
+    },
+    {
+        name: 'docker_compose_exec',
+        description: 'Run one process inside a compose service container without shell expansion. REQUIRES CONFIRMATION unless the final command is whitelisted.',
+        inputSchema: baseParams({
+            ...cwdParam,
+            service: { type: 'string' },
+            command: { type: 'string' },
+            args: { type: 'array', items: { type: 'string' } },
+            user: { type: 'string' },
+            ...confirmationParams
+        }, ['cwd', 'service', 'command'])
+    },
     {
         name: 'docker_ps',
         description: 'List docker containers.',
@@ -311,6 +404,20 @@ export const toolDefinitions = [
         description: 'Save one or more images to a tar archive. REQUIRES CONFIRMATION.',
         inputSchema: baseParams({ image: { type: 'string' }, path: { type: 'string' }, ...confirmationParams }, ['image', 'path'])
     },
+    {
+        name: 'docker_build',
+        description: 'Build a docker image from a build context. Supports options such as tag, dockerfile, build args, no-cache, and fixed host networking. REQUIRES CONFIRMATION unless the final command is whitelisted.',
+        inputSchema: baseParams({
+            ...cwdParam,
+            context: { type: 'string' },
+            tag: { type: 'string' },
+            dockerfile: { type: 'string' },
+            buildArgs: { type: 'array', items: { type: 'string' } },
+            noCache: { type: 'boolean' },
+            networkHost: { type: 'boolean' },
+            ...confirmationParams
+        }, ['context'])
+    },
     // --- Service & Network (Requirements) ---
     {
         name: 'systemctl_status',
@@ -332,15 +439,43 @@ export const toolDefinitions = [
         description: 'Stop system service. REQUIRES CONFIRMATION.',
         inputSchema: baseParams({ service: { type: 'string' }, ...confirmationParams }, ['service'])
     },
+    {
+        name: 'systemctl_enable',
+        description: 'Enable system service at boot. REQUIRES CONFIRMATION unless the final command is whitelisted.',
+        inputSchema: baseParams({ service: { type: 'string' }, ...confirmationParams }, ['service'])
+    },
+    {
+        name: 'systemctl_disable',
+        description: 'Disable system service at boot. REQUIRES CONFIRMATION unless the final command is whitelisted.',
+        inputSchema: baseParams({ service: { type: 'string' }, ...confirmationParams }, ['service'])
+    },
     {
         name: 'ip_addr',
         description: 'Show network interface info.',
         inputSchema: baseParams(grepParam)
     },
+    {
+        name: 'ip_route',
+        description: 'Show routing table information.',
+        inputSchema: baseParams(grepParam)
+    },
+    {
+        name: 'mount',
+        description: 'Show mounted filesystems.',
+        inputSchema: baseParams(grepParam)
+    },
     {
         name: 'journalctl',
-        description: 'Read systemd journal logs with optional unit, since, and priority filters.',
-        inputSchema: baseParams({ unit: { type: 'string' }, lines: { type: 'number' }, since: { type: 'string' }, priority: { type: 'string' }, grep: { type: 'string' } })
+        description: 'Read systemd journal logs with optional unit, since, until, priority, and follow filters.',
+        inputSchema: baseParams({
+            unit: { type: 'string' },
+            lines: { type: 'number' },
+            since: { type: 'string' },
+            until: { type: 'string' },
+            priority: { type: 'string' },
+            follow: { type: 'boolean' },
+            grep: { type: 'string' }
+        })
     },
     {
         name: 'firewall_cmd',
@@ -415,11 +550,41 @@ export const toolDefinitions = [
         description: 'System disk usage.',
         inputSchema: baseParams(grepParam)
     },
+    {
+        name: 'df_inode',
+        description: 'Filesystem inode usage.',
+        inputSchema: baseParams(grepParam)
+    },
     {
         name: 'du_sh',
         description: 'Directory size estimation.',
         inputSchema: baseParams({ path: { type: 'string' }, ...grepParam }, ['path'])
     },
+    {
+        name: 'which',
+        description: 'Resolve the executable path of a command available on the remote host.',
+        inputSchema: baseParams({ commandName: { type: 'string' }, ...grepParam }, ['commandName'])
+    },
+    {
+        name: 'lsof',
+        description: 'Inspect open files, ports, and process-file relationships.',
+        inputSchema: baseParams({
+            path: { type: 'string' },
+            process: { type: 'string' },
+            port: { type: 'number' },
+            ...grepParam
+        })
+    },
+    {
+        name: 'file',
+        description: 'Detect file type and encoding information.',
+        inputSchema: baseParams({ path: { type: 'string' }, ...grepParam }, ['path'])
+    },
+    {
+        name: 'stat',
+        description: 'File metadata inspection: Shows size, timestamps, mode bits, and related file details.',
+        inputSchema: baseParams({ filePath: { type: 'string' }, ...grepParam }, ['filePath'])
+    },
     {
         name: 'chmod',
         description: 'Change file mode bits. REQUIRES CONFIRMATION unless the final command is whitelisted.',

package/dist/tools/handlers.js

@@ -17,8 +17,11 @@ const WRITE_TOOLS = [
     'docker_compose_down',
     'docker_compose_stop',
     'docker_compose_restart',
+    'docker_compose_pull',
+    'docker_compose_exec',
     'docker_exec',
     'docker_pull',
+    'docker_build',
     'docker_cp',
     'docker_stop',
     'docker_rm',
@@ -31,6 +34,8 @@ const WRITE_TOOLS = [
     'systemctl_restart',
     'systemctl_start',
     'systemctl_stop',
+    'systemctl_enable',
+    'systemctl_disable',
     'firewall_cmd',
     'kill_process',
     'chmod',
@@ -117,6 +122,14 @@ export class ToolHandlers {
             this.validateShellToken(value, `${fieldName}[${index}]`);
         }
     }
+    /**
+     * Validate positive line counts for text inspection helpers.
+     */
+    validatePositiveInteger(value, fieldName) {
+        if (!Number.isInteger(value) || value <= 0) {
+            throw new Error(`${fieldName} must be a positive integer.`);
+        }
+    }
     escapePerlEnvBase64(value) {
         return Buffer.from(value).toString('base64');
     }
@@ -212,11 +225,37 @@ export class ToolHandlers {
         if ((name === 'netstat' || name === 'ss') && Array.isArray(params.args)) {
             this.validateTokenArray(params.args, `${name}.args`);
         }
+        if ((name === 'head' || name === 'tail') && params.lines !== undefined) {
+            this.validatePositiveInteger(params.lines, `${name}.lines`);
+        }
+        if (name === 'find' && params.maxDepth !== undefined) {
+            this.validatePositiveInteger(params.maxDepth, 'find.maxDepth');
+        }
+        if (name === 'sed') {
+            this.validatePositiveInteger(params.startLine, 'sed.startLine');
+            this.validatePositiveInteger(params.endLine, 'sed.endLine');
+            if (params.endLine < params.startLine) {
+                throw new Error(`sed.endLine must be greater than or equal to sed.startLine.`);
+            }
+        }
         if (name === 'docker_exec' && Array.isArray(params.args)) {
             for (const [index, arg] of params.args.entries()) {
                 this.validateShellFragment(arg, `docker_exec.args[${index}]`);
             }
         }
+        if (name === 'docker_compose_exec' && Array.isArray(params.args)) {
+            for (const [index, arg] of params.args.entries()) {
+                this.validateShellFragment(arg, `docker_compose_exec.args[${index}]`);
+            }
+        }
+        if (name === 'docker_build') {
+            if (params.tag) {
+                this.validateShellToken(params.tag, 'docker_build.tag');
+            }
+            for (const [index, buildArg] of (params.buildArgs || []).entries()) {
+                this.validateShellFragment(buildArg, `docker_build.buildArgs[${index}]`);
+            }
+        }
         if ((name === 'tar_create' || name === 'zip') && Array.isArray(params.sourcePaths)) {
             if (params.sourcePaths.length === 0) {
                 throw new Error(`${name}.sourcePaths must contain at least one path.`);
@@ -236,13 +275,29 @@ export class ToolHandlers {
     getCommandForTool(name, params) {
         switch (name) {
             case 'get_system_info': return 'echo "USER: $(whoami)"; echo "UPTIME: $(uptime)"; echo "KERNEL: $(uname -a)"; echo "MEMORY:"; free -m';
+            case 'hostname': return 'hostname';
+            case 'id': return 'id';
+            case 'uname': return `uname ${params.all === false ? '-s' : '-a'}`;
+            case 'uptime': return 'uptime';
+            case 'free': return 'free -m';
+            case 'env': return 'env';
             case 'check_dependencies': return `for cmd in ${params.commands.map((cmd) => this.shellEscape(cmd)).join(' ')}; do which "$cmd" || echo "$cmd not found"; done`;
             case 'pwd': return 'pwd';
             case 'cd': return `cd ${this.shellEscape(params.path)}`;
-            case 'll': return 'ls -l';
+            case 'll': return `ls -l${params.all ? 'a' : ''}`;
             case 'cat': return `cat ${this.shellEscape(params.filePath)}`;
+            case 'head': return `head -n ${params.lines || 40} ${this.shellEscape(params.filePath)}`;
             case 'tail': return `tail -n ${params.lines || 50} ${this.shellEscape(params.filePath)}`;
+            case 'sed': return `sed -n '${params.startLine},${params.endLine}p' ${this.shellEscape(params.filePath)}`;
             case 'grep': return `grep ${params.ignoreCase ? '-inE' : '-nE'} ${this.shellEscape(params.pattern)} ${this.shellEscape(params.filePath)}`;
+            case 'grep_r': {
+                const includeArgs = (params.include || []).map((value) => ` --include ${this.shellEscape(value)}`).join('');
+                const excludeDirArgs = (params.excludeDir || []).map((value) => ` --exclude-dir ${this.shellEscape(value)}`).join('');
+                const contextArgs = params.context !== undefined
+                    ? ` -C ${params.context}`
+                    : `${params.beforeContext !== undefined ? ` -B ${params.beforeContext}` : ''}${params.afterContext !== undefined ? ` -A ${params.afterContext}` : ''}`;
+                return `grep ${params.ignoreCase ? '-RinE' : '-RnE'}${contextArgs}${includeArgs}${excludeDirArgs} ${this.shellEscape(params.pattern)} ${this.shellEscape(params.path)}`;
+            }
             case 'edit_text_file':
                 const edB64 = Buffer.from(params.content).toString('base64');
                 return `printf '%s' ${this.shellEscape(edB64)} | base64 -d > ${this.shellEscape(params.filePath)}`;
@@ -265,7 +320,8 @@ export class ToolHandlers {
                     throw new Error(`RM_SAFE: Denied for restricted directory.`);
                 return `rm ${params.recursive ? '-rf' : '-f'} ${this.shellEscape(params.path)}`;
             case 'echo': return `echo ${this.shellEscape(params.text)}`;
-            case 'find': return `find ${this.shellEscape(params.path)} -name ${this.shellEscape(params.name)}`;
+            case 'find':
+                return `find ${this.shellEscape(params.path)}${params.maxDepth !== undefined ? ` -maxdepth ${params.maxDepth}` : ''}${params.type ? ` -type ${params.type}` : ''}${params.name ? ` -name ${this.shellEscape(params.name)}` : ''}${params.pathPattern ? ` -path ${this.shellEscape(params.pathPattern)}` : ''}`;
             case 'git_status': return 'git status';
             case 'git_fetch': return `git fetch ${params.all ? '--all ' : ''}${params.prune ? '--prune' : ''}`.trim();
             case 'git_pull': return 'git pull --no-edit';
@@ -285,6 +341,11 @@ export class ToolHandlers {
             case 'docker_compose_stop': return 'docker-compose stop';
             case 'docker_compose_logs': return `docker-compose logs -n ${params.lines || 100}`;
             case 'docker_compose_restart': return 'docker-compose restart';
+            case 'docker_compose_pull': return `docker-compose pull${params.service ? ` ${this.shellEscape(params.service)}` : ''}`;
+            case 'docker_compose_ps': return `docker-compose ps${params.service ? ` ${this.shellEscape(params.service)}` : ''}`;
+            case 'docker_compose_config': return 'docker-compose config';
+            case 'docker_compose_exec':
+                return `docker-compose exec -T${params.user ? ` --user ${this.shellEscape(params.user)}` : ''} ${this.shellEscape(params.service)} ${this.shellEscape(params.command)}${params.args?.length ? ` ${this.shellEscapeList(params.args)}` : ''}`;
             case 'docker_ps': return 'docker ps';
             case 'docker_images': return 'docker images';
             case 'docker_exec':
@@ -304,13 +365,21 @@ export class ToolHandlers {
             case 'docker_logs': return `docker logs -n ${params.lines || 100} ${this.shellEscape(params.container)}`;
             case 'docker_load': return `docker load -i ${this.shellEscape(params.path)}`;
             case 'docker_save': return `docker save -o ${this.shellEscape(params.path)} ${this.shellEscape(params.image)}`;
+            case 'docker_build': {
+                const buildArgs = (params.buildArgs || []).map((value) => ` --build-arg ${this.shellEscape(value)}`).join('');
+                return `docker build${params.tag ? ` -t ${this.shellEscape(params.tag)}` : ''}${params.dockerfile ? ` -f ${this.shellEscape(params.dockerfile)}` : ''}${params.noCache ? ' --no-cache' : ''}${params.networkHost ? ' --network=host' : ''}${buildArgs} ${this.shellEscape(params.context)}`;
+            }
             case 'systemctl_status': return `systemctl status ${this.shellEscape(params.service)}`;
             case 'systemctl_restart': return `systemctl restart ${this.shellEscape(params.service)}`;
             case 'systemctl_start': return `systemctl start ${this.shellEscape(params.service)}`;
             case 'systemctl_stop': return `systemctl stop ${this.shellEscape(params.service)}`;
+            case 'systemctl_enable': return `systemctl enable ${this.shellEscape(params.service)}`;
+            case 'systemctl_disable': return `systemctl disable ${this.shellEscape(params.service)}`;
             case 'ip_addr': return 'ip addr';
+            case 'ip_route': return 'ip route';
+            case 'mount': return 'mount';
             case 'journalctl':
-                return `journalctl --no-pager${params.unit ? ` -u ${this.shellEscape(params.unit)}` : ''}${params.priority ? ` -p ${this.shellEscape(params.priority)}` : ''}${params.since ? ` --since ${this.shellEscape(params.since)}` : ''} -n ${params.lines || 100}`;
+                return `journalctl --no-pager${params.unit ? ` -u ${this.shellEscape(params.unit)}` : ''}${params.priority ? ` -p ${this.shellEscape(params.priority)}` : ''}${params.since ? ` --since ${this.shellEscape(params.since)}` : ''}${params.until ? ` --until ${this.shellEscape(params.until)}` : ''}${params.follow ? ' -f' : ''} -n ${params.lines || 100}`;
             case 'firewall_cmd':
                 return this.buildFirewallCommand(params);
             case 'netstat':
@@ -336,7 +405,13 @@ export class ToolHandlers {
                 return common;
             }
             case 'df_h': return 'df -h';
+            case 'df_inode': return 'df -i';
             case 'du_sh': return `du -sh ${this.shellEscape(params.path)}`;
+            case 'which': return `which ${this.shellEscape(params.commandName)}`;
+            case 'lsof':
+                return `lsof${params.path ? ` ${this.shellEscape(params.path)}` : ''}${params.process ? ` -c ${this.shellEscape(params.process)}` : ''}${params.port !== undefined ? ` -i :${params.port}` : ''}`;
+            case 'file': return `file ${this.shellEscape(params.path)}`;
+            case 'stat': return `stat ${this.shellEscape(params.filePath)}`;
             case 'nvidia_smi': return 'nvidia-smi';
             case 'ps': return 'ps aux';
             case 'pgrep': return `pgrep ${params.fullCommand ? '-af ' : '-a '}${this.shellEscape(params.pattern)}`;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jadchene/mcp-ssh-service",
-  "version": "1.4.0",
+  "version": "1.4.2",
   "description": "A production-ready, highly secure SSH MCP server featuring stateless connections, two-step operation confirmation, and comprehensive DevOps tool integration.",
   "main": "dist/index.js",
   "type": "module",