@thesashadev/ssh-mcp-server 1.0.0

package/README.md

@@ -0,0 +1,212 @@
+# ssh-mcp-server
+
+MCP server for executing commands, uploading and downloading files on remote servers via SSH. Optimized for AI agents (Claude Code, Cursor, Windsurf, Antigravity, etc).
+
+## ✨ Features
+
+- **Command execution** — sync/async modes, timeout, background polling
+- **Reliable file transfers** — 5 automatic fallback strategies (SFTP parallel → SFTP stream → SCP → base64 → chunked)
+- **Multi-server** — easy switching with workspace-based auto-selection
+- **AI-Native output** — ANSI codes stripped, binary detected, control chars removed
+- **Extreme Performance** — Cached sessions, connection pooling, 64-stream parallel transfers
+
+## 🛠 Tools
+
+| Tool | Description |
+|------|-------------|
+| `ssh_servers` | List configured servers and their workspace bindings |
+| `ssh_execute` | Run a shell command (sync or async with polling) |
+| `ssh_upload` | Upload a local file to remote server |
+| `ssh_download` | Download a remote file to local machine |
+
+## 🚀 Quick Start
+
+### Option A: Use via npx (Fastest)
+1. Create `ssh-servers.json` in your current folder.
+2. Run directly:
+```bash
+npx -y @thesashadev/ssh-mcp-server
+```
+
+### Option B: Local Build
+1. Clone & Build:
+```bash
+git clone https://github.com/TheSashaDev/ssh-mcp-server.git
+cd ssh-mcp-server
+npm install
+npm run build
+```
+
+2. Create `ssh-servers.json` in the project root.
+```json
+{
+  "servers": [
+    {
+      "id": "dev",
+      "name": "Dev Server",
+      "host": "1.2.3.4",
+      "username": "ubuntu",
+      "password": "your-password",
+      "workspaces": ["D:\\projects\\my-app"]
+    }
+  ]
+}
+```
+*Supports password, private key (`privateKeyPath`), and SSH agent auth.*
+
+## 🔌 Client Integration
+
+Select your AI tool to see the setup guide:
+
+<details>
+<summary><b>🤖 Claude Code (CLI)</b></summary>
+
+Run this command in your terminal:
+```bash
+claude mcp add ssh -- node "D:/ssh mco/dist/index.js"
+```
+Or manually add to `~/.config/claude/mcp_servers.json`:
+```json
+{
+  "mcpServers": {
+    "ssh": {
+      "command": "node",
+      "args": ["D:/ssh mco/dist/index.js"]
+    }
+  }
+}
+```
+</details>
+
+<details>
+<summary><b>🖥️ Claude Desktop</b></summary>
+
+Edit your `claude_desktop_config.json`:
+- **Windows:** `%APPDATA%\Claude\claude_desktop_config.json`
+- **macOS:** `~/Library/Application Support/Claude/claude_desktop_config.json`
+
+```json
+{
+  "mcpServers": {
+    "ssh": {
+      "command": "node",
+      "args": ["D:/ssh mco/dist/index.js"]
+    }
+  }
+}
+```
+</details>
+
+<details>
+<summary><b>🖱️ Cursor</b></summary>
+
+1. Go to **Settings** > **Cursor Settings** > **Features** > **MCP**.
+2. Click **+ Add New MCP Server**.
+3. Name: `ssh`. Type: `command`. 
+4. Command:
+```bash
+node "D:/ssh mco/dist/index.js"
+```
+</details>
+
+<details>
+<summary><b>🏄 Windsurf</b></summary>
+
+Edit `~/.codeium/windsurf/mcp_config.json` (macOS/Linux) or `%USERPROFILE%\.codeium\windsurf\mcp_config.json` (Windows):
+
+```json
+{
+  "mcpServers": {
+    "ssh": {
+      "command": "node",
+      "args": ["D:/ssh mco/dist/index.js"]
+    }
+  }
+}
+```
+</details>
+
+<details>
+<summary><b>🛡️ Antigravity</b></summary>
+
+Add to `mcp_config.json`:
+```json
+{
+  "mcpServers": {
+    "ssh": {
+      "command": "node",
+      "args": ["D:/ssh mco/dist/index.js"]
+    }
+  }
+}
+```
+</details>
+
+<details>
+<summary><b>🧠 Codex</b></summary>
+
+Add to `codex.toml`:
+```toml
+[mcp_servers."ssh"]
+command = "node"
+args = ["D:/ssh mco/dist/index.js"]
+enabled = true
+```
+</details>
+
+<details>
+<summary><b>🔍 Cody (Sourcegraph)</b></summary>
+
+Edit `~/.config/cody/mcp_servers.json` (macOS/Linux) or `%USERPROFILE%\.config\cody\mcp_servers.json` (Windows):
+```json
+{
+  "mcpServers": {
+    "ssh": {
+      "command": "node",
+      "args": ["D:/ssh mco/dist/index.js"]
+    }
+  }
+}
+```
+</details>
+
+<details>
+<summary><b>🔁 Continue.dev</b></summary>
+
+Add to your `.continue/config.json`:
+```json
+{
+  "contextProviders": [
+    {
+      "name": "mcp",
+      "params": {
+        "mcpServers": {
+          "ssh": {
+            "command": "node",
+            "args": ["D:/ssh mco/dist/index.js"]
+          }
+        }
+      }
+    }
+  ]
+}
+```
+</details>
+
+## ⚙️ Server Config
+
+| Field | Required | Description |
+|-------|----------|-------------|
+| `id` | yes | ID used in tool calls |
+| `host` | yes | SSH host |
+| `username` | yes | SSH username |
+| `password` | no | Password auth |
+| `privateKeyPath`| no | Path to private key |
+| `workspaces` | no | Local folders for auto-selection |
+
+### Workspace Auto-Selection
+When `workspaces` are set (e.g. `["D:\\projects\\my-app"]`), the AI automatically selects the correct server based on your current local directory. No manual `server_id` required!
+
+## 📜 License
+
+AGPL-3.0

package/dist/config.d.ts

@@ -0,0 +1,25 @@
+export interface ServerConfig {
+    id: string;
+    name: string;
+    host: string;
+    port: number;
+    username: string;
+    password?: string;
+    privateKeyPath?: string;
+    passphrase?: string;
+    defaultRemoteDir: string;
+    workspaces: string[];
+}
+export interface Config {
+    servers: ServerConfig[];
+}
+export declare function loadConfig(): Config;
+export declare function getServer(serverId: string): ServerConfig;
+export declare function findServerByWorkspace(localPath?: string): ServerConfig | null;
+export declare function listServers(): Array<{
+    id: string;
+    name: string;
+    host: string;
+    workspaces: string[];
+}>;
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,YAAY;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,CAAC;IACzB,UAAU,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,MAAM,WAAW,MAAM;IACnB,OAAO,EAAE,YAAY,EAAE,CAAC;CAC3B;AAOD,wBAAgB,UAAU,IAAI,MAAM,CAyCnC;AAED,wBAAgB,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,YAAY,CAQxD;AAED,wBAAgB,qBAAqB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CAkB7E;AAED,wBAAgB,WAAW,IAAI,KAAK,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAQrG"}

package/dist/config.js

@@ -0,0 +1,82 @@
+import { readFileSync } from 'fs';
+import { resolve } from 'path';
+import { fileURLToPath } from 'url';
+import { dirname, normalize } from 'path';
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = dirname(__filename);
+let cachedConfig = null;
+export function loadConfig() {
+    if (cachedConfig)
+        return cachedConfig;
+    let configPath = process.env.SSH_MCP_CONFIG;
+    if (!configPath) {
+        const cwdConfig = resolve(process.cwd(), 'ssh-servers.json');
+        try {
+            if (readFileSync(cwdConfig))
+                configPath = cwdConfig;
+        }
+        catch { }
+    }
+    if (!configPath) {
+        configPath = resolve(__dirname, '..', 'ssh-servers.json');
+    }
+    try {
+        const raw = readFileSync(configPath, 'utf-8');
+        const parsed = JSON.parse(raw);
+        if (!parsed.servers || !Array.isArray(parsed.servers)) {
+            throw new Error('Config must have a "servers" array');
+        }
+        for (const srv of parsed.servers) {
+            if (!srv.id || !srv.host || !srv.username) {
+                throw new Error(`Server "${srv.id || 'unknown'}" missing required fields (id, host, username)`);
+            }
+            srv.port = srv.port || 22;
+            srv.defaultRemoteDir = srv.defaultRemoteDir || '/home/' + srv.username;
+            srv.workspaces = (srv.workspaces || []).map(w => normalize(w).toLowerCase());
+        }
+        cachedConfig = parsed;
+        return parsed;
+    }
+    catch (err) {
+        if (err.code === 'ENOENT') {
+            throw new Error(`Config file not found at ${configPath}. Create ssh-servers.json with your server definitions.`);
+        }
+        throw new Error(`Failed to load config: ${err.message}`);
+    }
+}
+export function getServer(serverId) {
+    const config = loadConfig();
+    const srv = config.servers.find(s => s.id === serverId);
+    if (!srv) {
+        const available = config.servers.map(s => `"${s.id}" (${s.name})`).join(', ');
+        throw new Error(`Server "${serverId}" not found. Available: ${available}`);
+    }
+    return srv;
+}
+export function findServerByWorkspace(localPath) {
+    if (!localPath)
+        return null;
+    const config = loadConfig();
+    const normalizedPath = normalize(localPath).toLowerCase();
+    let bestMatch = null;
+    let bestLen = 0;
+    for (const srv of config.servers) {
+        for (const ws of srv.workspaces) {
+            if (normalizedPath.startsWith(ws) && ws.length > bestLen) {
+                bestMatch = srv;
+                bestLen = ws.length;
+            }
+        }
+    }
+    return bestMatch;
+}
+export function listServers() {
+    const config = loadConfig();
+    return config.servers.map(s => ({
+        id: s.id,
+        name: s.name,
+        host: s.host,
+        workspaces: s.workspaces,
+    }));
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAC/B,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAO,MAAM,MAAM,CAAC;AAmB/C,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;AAEtC,IAAI,YAAY,GAAkB,IAAI,CAAC;AAEvC,MAAM,UAAU,UAAU;IACtB,IAAI,YAAY;QAAE,OAAO,YAAY,CAAC;IAEtC,IAAI,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;IAE5C,IAAI,CAAC,UAAU,EAAE,CAAC;QACd,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,kBAAkB,CAAC,CAAC;QAC7D,IAAI,CAAC;YACD,IAAI,YAAY,CAAC,SAAS,CAAC;gBAAE,UAAU,GAAG,SAAS,CAAC;QACxD,CAAC;QAAC,MAAM,CAAC,CAAC,CAAC;IACf,CAAC;IAED,IAAI,CAAC,UAAU,EAAE,CAAC;QACd,UAAU,GAAG,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,kBAAkB,CAAC,CAAC;IAC9D,CAAC;IAED,IAAI,CAAC;QACD,MAAM,GAAG,GAAG,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAW,CAAC;QAEzC,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QAC1D,CAAC;QAED,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YAC/B,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;gBACxC,MAAM,IAAI,KAAK,CAAC,WAAW,GAAG,CAAC,EAAE,IAAI,SAAS,gDAAgD,CAAC,CAAC;YACpG,CAAC;YACD,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;YAC1B,GAAG,CAAC,gBAAgB,GAAG,GAAG,CAAC,gBAAgB,IAAI,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;YACvE,GAAG,CAAC,UAAU,GAAG,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QACjF,CAAC;QAED,YAAY,GAAG,MAAM,CAAC;QACtB,OAAO,MAAM,CAAC;IAClB,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAChB,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,4BAA4B,UAAU,yDAAyD,CAAC,CAAC;QACrH,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,0BAA0B,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IAC7D,CAAC;AACL,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,QAAgB;IACtC,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC;IACxD,IAAI,CAAC,GAAG,EAAE,CAAC;QACP,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9E,MAAM,IAAI,KAAK,CAAC,WAAW,QAAQ,2BAA2B,SAAS,EAAE,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,GAAG,CAAC;AACf,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,SAAkB;IACpD,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAC5B,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,MAAM,cAAc,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC;IAE1D,IAAI,SAAS,GAAwB,IAAI,CAAC;IAC1C,IAAI,OAAO,GAAG,CAAC,CAAC;IAEhB,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QAC/B,KAAK,MAAM,EAAE,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;YAC9B,IAAI,cAAc,CAAC,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,OAAO,EAAE,CAAC;gBACvD,SAAS,GAAG,GAAG,CAAC;gBAChB,OAAO,GAAG,EAAE,CAAC,MAAM,CAAC;YACxB,CAAC;QACL,CAAC;IACL,CAAC;IAED,OAAO,SAAS,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,WAAW;IACvB,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,OAAO,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC5B,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,UAAU,EAAE,CAAC,CAAC,UAAU;KAC3B,CAAC,CAAC,CAAC;AACR,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":""}

package/dist/index.js

@@ -0,0 +1,114 @@
+#!/usr/bin/env node
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
+import { z } from 'zod';
+import { loadConfig, findServerByWorkspace } from './config.js';
+import { executeCommand } from './tools/execute.js';
+import { uploadFile } from './tools/upload.js';
+import { downloadFile } from './tools/download.js';
+import { closeAll } from './ssh-manager.js';
+const server = new McpServer({ name: 'ssh-mcp-server', version: '1.0.0' }, { capabilities: { tools: {}, resources: {} } });
+function resolveServerId(serverId, workspace) {
+    if (serverId)
+        return serverId;
+    const config = loadConfig();
+    if (workspace) {
+        const srv = findServerByWorkspace(workspace);
+        if (srv)
+            return srv.id;
+    }
+    if (config.servers.length === 1)
+        return config.servers[0].id;
+    throw new Error(`Multiple servers configured. Use ssh_servers tool to see available servers, then pass server_id.`);
+}
+// ---- ssh_servers ----
+server.tool('ssh_servers', 'List all configured SSH servers with their IDs, hosts, and workspace bindings. Call this first to discover which server_id to use with other SSH tools.', {}, async () => {
+    try {
+        const config = loadConfig();
+        const lines = config.servers.map(s => {
+            const ws = s.workspaces.length > 0 ? s.workspaces.join(', ') : 'none';
+            return `id=${s.id} | ${s.name} | ${s.host}:${s.port} | user=${s.username} | remote_default=${s.defaultRemoteDir} | workspaces: ${ws}`;
+        });
+        return { content: [{ type: 'text', text: lines.join('\n') }] };
+    }
+    catch (err) {
+        return { content: [{ type: 'text', text: `Error: ${err.message}` }], isError: true };
+    }
+});
+// ---- ssh_execute ----
+server.tool('ssh_execute', `Run a shell command on a remote SSH server. Output is auto-cleaned (no ANSI, no binary garbage).
+
+Sync mode (default): returns stdout, stderr, exit code.
+Async mode (async=true): returns command_id immediately. Call again with command_id to poll status/output.`, {
+    server_id: z.string().optional().describe('Server ID. Auto-detected if one server or matched by workspace.'),
+    workspace: z.string().optional().describe('Local directory for auto-selecting server.'),
+    command: z.string().optional().describe('Shell command. Required unless polling via command_id.'),
+    cwd: z.string().optional().describe('Remote working directory.'),
+    timeout_ms: z.number().optional().default(30000).describe('Timeout in ms. 0=no limit.'),
+    async: z.boolean().optional().default(false).describe('Start in background, return command_id.'),
+    command_id: z.string().optional().describe('Poll async command status. Other params ignored when set.'),
+}, async (params) => {
+    try {
+        if (params.command_id) {
+            return { content: [{ type: 'text', text: await executeCommand({ serverId: '', command: '', commandId: params.command_id }) }] };
+        }
+        if (!params.command) {
+            return { content: [{ type: 'text', text: 'Error: command is required unless polling with command_id.' }], isError: true };
+        }
+        const serverId = resolveServerId(params.server_id, params.workspace);
+        const result = await executeCommand({ serverId, command: params.command, cwd: params.cwd, timeoutMs: params.timeout_ms, async: params.async });
+        return { content: [{ type: 'text', text: result }] };
+    }
+    catch (err) {
+        return { content: [{ type: 'text', text: `Error: ${err.message}` }], isError: true };
+    }
+});
+// ---- ssh_upload ----
+server.tool('ssh_upload', 'Upload a local file to a remote SSH server. Handles any file type/size. Remote directories created automatically. Paths with spaces are safe.', {
+    server_id: z.string().optional().describe('Server ID.'),
+    workspace: z.string().optional().describe('Local directory for auto-selecting server.'),
+    local_path: z.string().describe('Absolute local file path.'),
+    remote_path: z.string().describe('Absolute remote destination path.'),
+    overwrite: z.boolean().optional().default(true).describe('Overwrite if exists.'),
+}, async (params) => {
+    try {
+        const serverId = resolveServerId(params.server_id, params.workspace);
+        const result = await uploadFile({ serverId, localPath: params.local_path, remotePath: params.remote_path, overwrite: params.overwrite });
+        return { content: [{ type: 'text', text: result }], isError: result.startsWith('FAILED') || result.startsWith('Error') };
+    }
+    catch (err) {
+        return { content: [{ type: 'text', text: `Error: ${err.message}` }], isError: true };
+    }
+});
+// ---- ssh_download ----
+server.tool('ssh_download', 'Download a file from a remote SSH server to the local machine. Handles any file type/size. Local directories created automatically. Paths with spaces are safe.', {
+    server_id: z.string().optional().describe('Server ID.'),
+    workspace: z.string().optional().describe('Local directory for auto-selecting server.'),
+    remote_path: z.string().describe('Absolute remote file path.'),
+    local_path: z.string().describe('Absolute local destination path.'),
+    overwrite: z.boolean().optional().default(true).describe('Overwrite if exists.'),
+}, async (params) => {
+    try {
+        const serverId = resolveServerId(params.server_id, params.workspace);
+        const result = await downloadFile({ serverId, remotePath: params.remote_path, localPath: params.local_path, overwrite: params.overwrite });
+        return { content: [{ type: 'text', text: result }], isError: result.startsWith('FAILED') || result.startsWith('Error') };
+    }
+    catch (err) {
+        return { content: [{ type: 'text', text: `Error: ${err.message}` }], isError: true };
+    }
+});
+// ---- Start ----
+async function main() {
+    try {
+        const config = loadConfig();
+        console.error(`ssh-mcp: ${config.servers.length} server(s)`);
+    }
+    catch (err) {
+        console.error(`ssh-mcp: ${err.message}`);
+    }
+    const transport = new StdioServerTransport();
+    await server.connect(transport);
+    console.error('ssh-mcp: ready');
+}
+main().catch((e) => { console.error('Fatal:', e); closeAll(); process.exit(1); });
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,UAAU,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAChE,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE5C,MAAM,MAAM,GAAG,IAAI,SAAS,CACxB,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,OAAO,EAAE,EAC5C,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,CACjD,CAAC;AAEF,SAAS,eAAe,CAAC,QAAiB,EAAE,SAAkB;IAC1D,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,IAAI,SAAS,EAAE,CAAC;QACZ,MAAM,GAAG,GAAG,qBAAqB,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,GAAG;YAAE,OAAO,GAAG,CAAC,EAAE,CAAC;IAC3B,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7D,MAAM,IAAI,KAAK,CAAC,kGAAkG,CAAC,CAAC;AACxH,CAAC;AAED,wBAAwB;AACxB,MAAM,CAAC,IAAI,CACP,aAAa,EACb,yJAAyJ,EACzJ,EAAE,EACF,KAAK,IAAI,EAAE;IACP,IAAI,CAAC;QACD,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;YACjC,MAAM,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YACtE,OAAO,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,WAAW,CAAC,CAAC,QAAQ,qBAAqB,CAAC,CAAC,gBAAgB,kBAAkB,EAAE,EAAE,CAAC;QAC1I,CAAC,CAAC,CAAC;QACH,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;IAC5E,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAChB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAClG,CAAC;AACL,CAAC,CACJ,CAAC;AAEF,wBAAwB;AACxB,MAAM,CAAC,IAAI,CACP,aAAa,EACb;;;2GAGuG,EACvG;IACI,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iEAAiE,CAAC;IAC5G,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4CAA4C,CAAC;IACvF,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wDAAwD,CAAC;IACjG,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC;IAChE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,4BAA4B,CAAC;IACvF,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,yCAAyC,CAAC;IAChG,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2DAA2D,CAAC;CAC1G,EACD,KAAK,EAAE,MAAM,EAAE,EAAE;IACb,IAAI,CAAC;QACD,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;YACpB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;QAC7I,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAClB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,4DAA4D,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACvI,CAAC;QACD,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QACrE,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QAC/I,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;IAClE,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAChB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAClG,CAAC;AACL,CAAC,CACJ,CAAC;AAEF,uBAAuB;AACvB,MAAM,CAAC,IAAI,CACP,YAAY,EACZ,+IAA+I,EAC/I;IACI,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC;IACvD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4CAA4C,CAAC;IACvF,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC;IAC5D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC;IACrE,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,sBAAsB,CAAC;CACnF,EACD,KAAK,EAAE,MAAM,EAAE,EAAE;IACb,IAAI,CAAC;QACD,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QACrE,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,UAAU,EAAE,UAAU,EAAE,MAAM,CAAC,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;QACzI,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;IACtI,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAChB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAClG,CAAC;AACL,CAAC,CACJ,CAAC;AAEF,yBAAyB;AACzB,MAAM,CAAC,IAAI,CACP,cAAc,EACd,iKAAiK,EACjK;IACI,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC;IACvD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4CAA4C,CAAC;IACvF,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC;IAC9D,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kCAAkC,CAAC;IACnE,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,sBAAsB,CAAC;CACnF,EACD,KAAK,EAAE,MAAM,EAAE,EAAE;IACb,IAAI,CAAC;QACD,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QACrE,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;QAC3I,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;IACtI,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAChB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAClG,CAAC;AACL,CAAC,CACJ,CAAC;AAEF,kBAAkB;AAClB,KAAK,UAAU,IAAI;IACf,IAAI,CAAC;QACD,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,OAAO,CAAC,KAAK,CAAC,YAAY,MAAM,CAAC,OAAO,CAAC,MAAM,YAAY,CAAC,CAAC;IACjE,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAChB,OAAO,CAAC,KAAK,CAAC,YAAY,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IAC7C,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;AACpC,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC"}

package/dist/ssh-manager.d.ts

@@ -0,0 +1,12 @@
+import { Client, type SFTPWrapper } from 'ssh2';
+/**
+ * Get or create an SSH connection. Deduplicates concurrent requests for the same server.
+ */
+export declare function getConnection(serverId: string): Promise<Client>;
+/**
+ * Get cached SFTP session or create one. Deduplicates concurrent requests.
+ */
+export declare function getSftp(serverId: string): Promise<SFTPWrapper>;
+export declare function closeAll(): void;
+export declare function disconnect(serverId: string): void;
+//# sourceMappingURL=ssh-manager.d.ts.map

package/dist/ssh-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssh-manager.d.ts","sourceRoot":"","sources":["../src/ssh-manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAsB,KAAK,WAAW,EAAE,MAAM,MAAM,CAAC;AAoBpE;;GAEG;AACH,wBAAsB,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAkBrE;AA4ED;;GAEG;AACH,wBAAsB,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAkCpE;AAED,wBAAgB,QAAQ,IAAI,IAAI,CAK/B;AAED,wBAAgB,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAMjD"}

package/dist/ssh-manager.js

@@ -0,0 +1,183 @@
+import { Client } from 'ssh2';
+import { readFileSync } from 'fs';
+import { getServer } from './config.js';
+const pool = new Map();
+const pendingConnections = new Map(); // Dedup concurrent connect requests
+const CONNECTION_TIMEOUT = 10000;
+const KEEPALIVE_INTERVAL = 15000;
+const IDLE_TIMEOUT = 300000;
+/**
+ * Get or create an SSH connection. Deduplicates concurrent requests for the same server.
+ */
+export async function getConnection(serverId) {
+    const existing = pool.get(serverId);
+    if (existing?.connected) {
+        existing.lastUsed = Date.now();
+        return existing.client;
+    }
+    // Dedup: if a connection is already being established, wait for it
+    const pending = pendingConnections.get(serverId);
+    if (pending)
+        return pending;
+    const promise = createConnection(serverId);
+    pendingConnections.set(serverId, promise);
+    try {
+        return await promise;
+    }
+    finally {
+        pendingConnections.delete(serverId);
+    }
+}
+async function createConnection(serverId) {
+    // Cleanup old
+    const old = pool.get(serverId);
+    if (old) {
+        old.sftp = null;
+        old.sftpPending = null;
+        try {
+            old.client.end();
+        }
+        catch { }
+        pool.delete(serverId);
+    }
+    const serverConfig = getServer(serverId);
+    const client = new Client();
+    const connectConfig = {
+        host: serverConfig.host,
+        port: serverConfig.port,
+        username: serverConfig.username,
+        readyTimeout: CONNECTION_TIMEOUT,
+        keepaliveInterval: KEEPALIVE_INTERVAL,
+        keepaliveCountMax: 5,
+        algorithms: {
+            // Prefer fast ciphers
+            cipher: ['aes128-gcm@openssh.com', 'aes256-gcm@openssh.com', 'aes128-ctr', 'aes192-ctr', 'aes256-ctr'],
+            // Prefer fast key exchange
+            kex: ['curve25519-sha256', 'curve25519-sha256@libssh.org', 'ecdh-sha2-nistp256', 'ecdh-sha2-nistp384', 'diffie-hellman-group14-sha256'],
+        },
+    };
+    if (serverConfig.privateKeyPath) {
+        try {
+            connectConfig.privateKey = readFileSync(serverConfig.privateKeyPath);
+        }
+        catch (err) {
+            throw new Error(`Cannot read private key "${serverConfig.privateKeyPath}": ${err.message}`);
+        }
+        if (serverConfig.passphrase)
+            connectConfig.passphrase = serverConfig.passphrase;
+    }
+    else if (serverConfig.password) {
+        connectConfig.password = serverConfig.password;
+    }
+    else {
+        connectConfig.agent = process.env.SSH_AUTH_SOCK;
+    }
+    return new Promise((resolve, reject) => {
+        const timeout = setTimeout(() => {
+            client.end();
+            reject(new Error(`Connection to "${serverId}" timed out (${CONNECTION_TIMEOUT}ms)`));
+        }, CONNECTION_TIMEOUT + 2000);
+        client.on('ready', () => {
+            clearTimeout(timeout);
+            pool.set(serverId, { client, config: serverConfig, lastUsed: Date.now(), connected: true, sftp: null, sftpPending: null });
+            resolve(client);
+        });
+        client.on('error', (err) => {
+            clearTimeout(timeout);
+            const p = pool.get(serverId);
+            if (p) {
+                p.connected = false;
+                p.sftp = null;
+                p.sftpPending = null;
+            }
+            reject(new Error(`SSH error "${serverId}": ${err.message}`));
+        });
+        client.on('close', () => {
+            const p = pool.get(serverId);
+            if (p) {
+                p.connected = false;
+                p.sftp = null;
+                p.sftpPending = null;
+            }
+        });
+        client.on('end', () => {
+            const p = pool.get(serverId);
+            if (p) {
+                p.connected = false;
+                p.sftp = null;
+                p.sftpPending = null;
+            }
+        });
+        client.connect(connectConfig);
+    });
+}
+/**
+ * Get cached SFTP session or create one. Deduplicates concurrent requests.
+ */
+export async function getSftp(serverId) {
+    await getConnection(serverId); // Ensure connected
+    const pooled = pool.get(serverId);
+    // Return cached
+    if (pooled.sftp) {
+        pooled.lastUsed = Date.now();
+        return pooled.sftp;
+    }
+    // Dedup concurrent SFTP requests
+    if (pooled.sftpPending)
+        return pooled.sftpPending;
+    const promise = new Promise((resolve, reject) => {
+        pooled.client.sftp((err, sftp) => {
+            if (err) {
+                pooled.sftpPending = null;
+                reject(new Error(`SFTP failed "${serverId}": ${err.message}`));
+            }
+            else {
+                pooled.sftp = sftp;
+                pooled.sftpPending = null;
+                pooled.lastUsed = Date.now();
+                // Clear cache if SFTP session closes
+                sftp.on('close', () => { pooled.sftp = null; });
+                sftp.on('end', () => { pooled.sftp = null; });
+                resolve(sftp);
+            }
+        });
+    });
+    pooled.sftpPending = promise;
+    return promise;
+}
+export function closeAll() {
+    for (const [, p] of pool) {
+        try {
+            p.client.end();
+        }
+        catch { }
+    }
+    pool.clear();
+}
+export function disconnect(serverId) {
+    const p = pool.get(serverId);
+    if (p) {
+        try {
+            p.client.end();
+        }
+        catch { }
+        pool.delete(serverId);
+    }
+}
+// Idle cleanup
+setInterval(() => {
+    const now = Date.now();
+    for (const [id, p] of pool) {
+        if (now - p.lastUsed > IDLE_TIMEOUT) {
+            try {
+                p.client.end();
+            }
+            catch { }
+            pool.delete(id);
+        }
+    }
+}, 60000).unref();
+process.on('exit', closeAll);
+process.on('SIGINT', () => { closeAll(); process.exit(0); });
+process.on('SIGTERM', () => { closeAll(); process.exit(0); });
+//# sourceMappingURL=ssh-manager.js.map