@neoline/hostbridge 1.4.2 → 1.4.4

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@neoline/hostbridge",
-  "version": "1.4.2",
+  "version": "1.4.4",
   "description": "HostBridge MCP server for persistent allowlisted SSH and shell sessions.",
   "type": "module",
   "license": "MIT",

package/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "hostbridge"
-version = "1.4.2"
+version = "1.4.4"
 description = "HostBridge MCP server for persistent allowlisted SSH and shell sessions."
 readme = "README.md"
 requires-python = ">=3.11"

package/src/server_control_mcp/manager.py

@@ -28,6 +28,8 @@ MAX_SHELL_TRANSFER_BYTES = 100 * 1024 * 1024
 DEFAULT_MAX_TRANSFER_BYTES = MAX_SHELL_TRANSFER_BYTES
 UPLOAD_BASE64_CHUNK_CHARS = 256 * 1024
 DOWNLOAD_CHUNK_BYTES = 5 * 1024 * 1024
+REMOTE_BASE64_DECODE_STDIN_CMD = "{ base64 --decode 2>/dev/null || base64 -d 2>/dev/null || base64 -D; }"
+REMOTE_BASE64_ENCODE_CMD = "{ base64 --wrap=0 2>/dev/null || base64 | tr -d '\\n'; }"
 
 class PolicyDeniedError(RuntimeError):
     """Raised when a command is blocked by the configured policy."""
@@ -678,7 +680,7 @@ class SessionManager:
             finalize_script = (
                 "set -e; "
                 f"target={remote_q}; mode={mode_q}; tmp_b64={shlex.quote(tmp_b64)}; tmp_out={shlex.quote(tmp_out)}; "
-                '{ base64 -d < "$tmp_b64" 2>/dev/null || base64 -D < "$tmp_b64"; } > "$tmp_out"; '
+                '{ base64 --decode < "$tmp_b64" 2>/dev/null || base64 -d < "$tmp_b64" 2>/dev/null || base64 -D < "$tmp_b64"; } > "$tmp_out"; '
                 'chmod "$mode" "$tmp_out"; mv "$tmp_out" "$target"; rm -f "$tmp_b64"; '
                 f"printf 'BYTES=%s\\nSHA256=%s\\n' {len(data)} {shlex.quote(sha256)}"
             )
@@ -787,7 +789,7 @@ class SessionManager:
         for index in range((byte_count + chunk_size - 1) // chunk_size):
             chunk_script = (
                 "set -e; "
-                f"dd if={remote_q} bs={chunk_size} skip={index} count=1 2>/dev/null | base64"
+                f"dd if={remote_q} bs={chunk_size} skip={index} count=1 2>/dev/null | {REMOTE_BASE64_ENCODE_CMD}"
             )
             output_limit = max(MAX_OUTPUT_CHARS, chunk_size * 2 + 4096)
             result = self.run_command(
@@ -899,7 +901,8 @@ class SessionManager:
     def _build_remote_line(self, command: str, token: str, start_marker: str) -> str:
         encoded_command = base64.b64encode(command.encode("utf-8")).decode("ascii")
         return (
-            f"__scm_cmd=$(printf %s {shlex.quote(encoded_command)} | {{ base64 --decode 2>/dev/null || base64 -D; }}); "
+            f"__scm_cmd=$(printf %s {shlex.quote(encoded_command)} | "
+            f"{REMOTE_BASE64_DECODE_STDIN_CMD}); "
             f"printf '\\n{start_marker}\\n'; "
             f"{self.remote_shell} -lc \"$__scm_cmd\"; "
             "__scm_status=$?; "

package/src/server_control_mcp/mock_ssh.py

@@ -255,12 +255,14 @@ class HostBridgeSFTPServer(asyncssh.SFTPServer):
         self._checked_run(f"mv -- {shlex.quote(self._path(oldpath))} {shlex.quote(self._path(newpath))}")
 
     def realpath(self, path: bytes) -> bytes:
-        command = (
-            "python3 -c "
-            + shlex.quote("import os,sys; print(os.path.realpath(sys.argv[1]))")
-            + " "
-            + shlex.quote(self._path(path))
+        script = (
+            "import os,sys; "
+            "path=sys.argv[1]; "
+            "parent=os.path.dirname(path) or '/'; "
+            "base=os.path.basename(path); "
+            "print(os.path.join(os.path.realpath(parent), base) if not os.path.exists(path) else os.path.realpath(path))"
         )
+        command = "python3 -c " + shlex.quote(script) + " " + shlex.quote(self._path(path))
         result = self._checked_run(command)
         return (result.output.strip() or self._path(path)).encode("utf-8")