@yawlabs/ssh-mcp 0.11.5 → 0.13.0

package/bin/ssh-mcp.mjs

@@ -0,0 +1,169 @@
+#!/usr/bin/env node
+/**
+ * Runtime launcher for @yawlabs/ssh-mcp.
+ *
+ * Prefers the oam runtime (https://oamjs.org) and falls back to the Node
+ * process already running this file.
+ *
+ *
+ * WHY THE FALLBACK COSTS NOTHING
+ * npm has already started Node to run this launcher, so falling back is a
+ * plain `import()` of the server into THIS process: no extra spawn, no extra
+ * startup, byte-identical to invoking dist/index.js directly. Discovery is
+ * stat-only -- never a subprocess -- so the miss case stays sub-millisecond.
+ *
+ * WHAT THE OAM PATH COSTS
+ * Reaching oam through an npm `bin` means Node boots first and oam boots
+ * second, so the launcher is slower than either runtime alone. Measured on
+ * npmjs-mcp (windows-arm64, n=12 medians, spawn to first MCP initialize):
+ * oam 116ms, node 172ms, launcher 243ms. oam is the fastest runtime and the
+ * launcher is the slowest path -- it exists for `npx` convenience.
+ *
+ * For an MCP host config, point straight at oam and skip this file:
+ *   { "command": "oam", "args": ["run", "<abs>/dist/index.js"] }
+ *
+ * SELECTION
+ *   SSH_MCP_RUNTIME=oam    require oam; fail loudly if it is missing
+ *   SSH_MCP_RUNTIME=node   never use oam
+ *   SSH_MCP_RUNTIME=auto   prefer oam, silently fall back (default)
+ *   OAM_BIN=/path/to/oam     explicit binary, checked before any discovery
+ */
+
+import { spawn } from "node:child_process";
+import { existsSync } from "node:fs";
+import { constants, homedir } from "node:os";
+import { delimiter, join } from "node:path";
+import { fileURLToPath } from "node:url";
+
+// Two forms, deliberately. `import()` on Windows REJECTS a bare `C:\...` path
+// with ERR_UNSUPPORTED_ESM_URL_SCHEME (it reads `c:` as a protocol), so the
+// in-process fallback must use the file:// URL. spawn() needs a real path.
+const SERVER_URL = new URL("../dist/index.js", import.meta.url);
+const SERVER_ENTRY = fileURLToPath(SERVER_URL);
+const isWin = process.platform === "win32";
+const exe = isWin ? "oam.exe" : "oam";
+
+/** Locate an oam binary, or null. Every branch is a stat, never a subprocess. */
+function findOam() {
+  // 1. Explicit override wins and is never second-guessed.
+  const override = process.env.OAM_BIN;
+  if (override) return existsSync(override) ? override : null;
+
+  // 2. Installed locations, BEFORE PATH. Someone who develops oam itself
+  //    usually has oam/target/release on PATH, and a build directory is the
+  //    wrong thing for a user-facing launcher to bind to: cargo replaces the
+  //    binary underneath running processes, and the dev build is not the
+  //    release the user installed. Preferring the installed copy makes the
+  //    default path "what a normal user has", and OAM_BIN remains the way to
+  //    point deliberately at a dev build.
+  //
+  //    Both forms are checked on Windows: the installer defaults to
+  //    %LOCALAPPDATA%oamin there, but oam's docs name ~/.oam/bin first and
+  //    OAM_INSTALL_DIR can pick either, so checking one silently misses a real
+  //    install.
+  const installed = [join(homedir(), ".oam", "bin", exe)];
+  if (isWin) {
+    installed.unshift(join(process.env.LOCALAPPDATA ?? join(homedir(), "AppData", "Local"), "oam", "bin", exe));
+  }
+  for (const candidate of installed) {
+    if (existsSync(candidate)) return candidate;
+  }
+
+  // 3. PATH, resolved manually rather than by spawning `which`/`where`, which
+  //    would cost a subprocess on every launch just to decide whether to spawn.
+  const pathExt = isWin ? (process.env.PATHEXT ?? ".EXE").split(";").filter(Boolean) : [""];
+  for (const dir of (process.env.PATH ?? "").split(delimiter)) {
+    if (!dir) continue;
+    for (const ext of isWin ? pathExt : [""]) {
+      const candidate = join(dir, isWin ? `oam${ext.toLowerCase()}` : "oam");
+      if (existsSync(candidate)) return candidate;
+    }
+  }
+
+  return null;
+}
+
+/** Run the server in THIS process. The zero-overhead fallback. */
+async function runInProcess() {
+  // A server may gate its bootstrap on being the process ENTRY POINT --
+  // `import.meta.url === pathToFileURL(process.argv[1]).href` -- so that its own
+  // test file can import the module for unit tests without connecting a stdio
+  // transport. aws-mcp does exactly this. Importing the server here would leave
+  // argv[1] pointing at THIS launcher, the guard would read false, and the
+  // server would load but never serve: the MCP handshake just hangs.
+  //
+  // Point argv[1] at the server first, so the in-process path is
+  // indistinguishable from having executed the file directly. The spawn path
+  // needs no equivalent -- there argv[1] is already the server.
+  process.argv[1] = SERVER_ENTRY;
+  await import(SERVER_URL.href);
+}
+
+const mode = (process.env.SSH_MCP_RUNTIME ?? "auto").toLowerCase();
+
+if (mode === "node") {
+  await runInProcess();
+} else {
+  const oam = findOam();
+
+  if (!oam) {
+    if (mode === "oam") {
+      // Explicitly demanded, so this is a real misconfiguration. writeSync
+      // because stderr is async for TTYs/pipes on Windows and process.exit
+      // truncates pending writes.
+      const { writeSync } = await import("node:fs");
+      writeSync(
+        2,
+        "ssh-mcp: SSH_MCP_RUNTIME=oam but no oam binary was found.\n" +
+          "Install from https://oamjs.org, set OAM_BIN=/path/to/oam, or use SSH_MCP_RUNTIME=node.\n",
+      );
+      process.exit(1);
+    }
+    await runInProcess();
+  } else {
+    // `--` separates oam's own flags from the script's argv, so `ssh-mcp
+    // --version` and any host-supplied flags survive the hop unchanged.
+    const child = spawn(oam, ["run", SERVER_ENTRY, "--", ...process.argv.slice(2)], {
+      // inherit keeps the SAME fds, so MCP's newline-delimited JSON framing on
+      // stdin/stdout is untouched and the host's stdin-close still reaches the
+      // server's shutdown path.
+      stdio: "inherit",
+      env: process.env,
+      windowsHide: true,
+    });
+
+    // If oam cannot be executed at all (deleted between the stat and the spawn,
+    // wrong arch, permission), fall back rather than failing the whole server.
+    // `spawned` prevents falling back AFTER the child started, which would
+    // double-start the server on the same stdio.
+    let spawned = false;
+    child.on("spawn", () => {
+      spawned = true;
+    });
+    child.on("error", (err) => {
+      if (spawned) return;
+      if (mode === "oam") {
+        process.stderr.write(`ssh-mcp: failed to launch oam (${err.message})\n`);
+        process.exit(1);
+      }
+      void runInProcess();
+    });
+
+    // Forward termination so the server's own shutdown path runs in the child
+    // rather than the child being orphaned. No-op on Windows, harmless to add.
+    for (const sig of ["SIGINT", "SIGTERM"]) {
+      process.on(sig, () => {
+        if (!child.killed) child.kill(sig);
+      });
+    }
+
+    child.on("exit", (code, signal) => {
+      // Mirror the child's fate: a signal death becomes 128+n so callers see a
+      // conventional shell exit status rather than a bare 0.
+      if (signal) {
+        process.exit(128 + (constants.signals[signal] ?? 15));
+      }
+      process.exit(code ?? 0);
+    });
+  }
+}

package/dist/index.js

@@ -214,8 +214,6 @@ function checkSshConfig(host) {
         if (inHostBlock) hostConfig.push(trimmed);
       } else if (inHostBlock && trimmed) {
         hostConfig.push(trimmed);
-      } else if (inHostBlock && !trimmed) {
-        inHostBlock = false;
       }
     }
     if (hostConfig.length === 0) {
@@ -615,7 +613,15 @@ import { readFileSync as readFileSync3 } from "fs";
 import { homedir as homedir3 } from "os";
 import { join as join3 } from "path";
 import { Client } from "ssh2";
+var sshConfigCache = /* @__PURE__ */ new Map();
 function resolveFromSshConfig(host) {
+  const cached = sshConfigCache.get(host);
+  if (cached !== void 0) return cached;
+  const result = resolveFromSshConfigUncached(host);
+  sshConfigCache.set(host, result);
+  return result;
+}
+function resolveFromSshConfigUncached(host) {
   try {
     const { stdout, ok } = runArgs("ssh", ["-G", host]);
     if (!ok) return null;
@@ -695,8 +701,10 @@ function resolveConfig(config) {
     keepaliveCountMax: 3,
     hostVerifier: buildHostVerifier(verifierHosts, port)
   };
+  const home = homedir3();
   if (config.privateKeyPath) {
-    connectConfig.privateKey = readFileSync3(config.privateKeyPath);
+    const keyPath = config.privateKeyPath.startsWith("~") ? join3(home, config.privateKeyPath.slice(1)) : config.privateKeyPath;
+    connectConfig.privateKey = readFileSync3(keyPath);
   } else if (config.password) {
     connectConfig.password = config.password;
   } else {
@@ -704,7 +712,6 @@ function resolveConfig(config) {
     if (agentSock) {
       connectConfig.agent = agentSock;
     }
-    const home = homedir3();
     const keyPaths = sshConfig && sshConfig.identityFiles.length > 0 ? sshConfig.identityFiles.map((p) => p.startsWith("~") ? join3(home, p.slice(1)) : p) : [join3(home, ".ssh", "id_ed25519"), join3(home, ".ssh", "id_rsa"), join3(home, ".ssh", "id_ecdsa")];
     for (const keyPath of keyPaths) {
       try {
@@ -941,10 +948,11 @@ async function writeFile(client, remotePath, content) {
   }
 }
 async function uploadFile(client, localPath, remotePath) {
+  const resolvedLocal = localPath.startsWith("~") ? join3(homedir3(), localPath.slice(1)) : localPath;
   const sftp = await getSftp(client);
   try {
     await new Promise((resolve, reject) => {
-      sftp.fastPut(localPath, remotePath, (err) => {
+      sftp.fastPut(resolvedLocal, remotePath, (err) => {
         if (err) return reject(err);
         resolve();
       });
@@ -954,10 +962,11 @@ async function uploadFile(client, localPath, remotePath) {
   }
 }
 async function downloadFile(client, remotePath, localPath) {
+  const resolvedLocal = localPath.startsWith("~") ? join3(homedir3(), localPath.slice(1)) : localPath;
   const sftp = await getSftp(client);
   try {
     await new Promise((resolve, reject) => {
-      sftp.fastGet(remotePath, localPath, (err) => {
+      sftp.fastGet(remotePath, resolvedLocal, (err) => {
         if (err) return reject(err);
         resolve();
       });
@@ -1296,16 +1305,16 @@ async function multiExec(pool, hosts, command, timeoutMs = 3e4) {
     };
   });
 }
-var VALID_FIND_SIZE = /^\d+[kMGTP]?$/;
+var VALID_FIND_SIZE = /^\d+[cwbkMG]?$/;
 async function find(client, options, timeoutMs = 3e4) {
   if (options.minsize && !VALID_FIND_SIZE.test(options.minsize)) {
     throw new Error(
-      `Invalid minsize format: "${options.minsize}". Expected: digits followed by optional k/M/G/T/P (e.g. "1M", "100k")`
+      `Invalid minsize format: "${options.minsize}". Expected: digits followed by optional c/w/b/k/M/G (e.g. "1M", "100k")`
     );
   }
   if (options.maxsize && !VALID_FIND_SIZE.test(options.maxsize)) {
     throw new Error(
-      `Invalid maxsize format: "${options.maxsize}". Expected: digits followed by optional k/M/G/T/P (e.g. "10M", "500k")`
+      `Invalid maxsize format: "${options.maxsize}". Expected: digits followed by optional c/w/b/k/M/G (e.g. "10M", "500k")`
     );
   }
   const args = ["--", shellQuote(options.path)];
@@ -1386,6 +1395,9 @@ function enforcePolicy(command) {
 
 // src/tools.ts
 var HostSchema = z.string().describe("SSH hostname or IP address");
+var AbsoluteRemotePathSchema = z.string().refine((p) => p.startsWith("/"), {
+  message: "Path must be absolute (start with /). SFTP does not expand ~ or resolve relative paths through a shell."
+});
 var PortSchema = z.number().int().min(1).max(65535).optional().describe("SSH port (default: 22)");
 var UsernameSchema = z.string().optional().describe("SSH username (default: current user)");
 var KeyPathSchema = z.string().optional().describe("Path to SSH private key");
@@ -1453,7 +1465,7 @@ ${result.stderr}`);
     "Write content to a file on a remote host via SFTP. Creates or overwrites the file.",
     {
       ...connectionParams,
-      path: z.string().describe("Absolute path to the remote file"),
+      path: AbsoluteRemotePathSchema.describe("Absolute path to the remote file. Must start with /."),
       content: z.string().describe("File content to write")
     },
     async ({ path, content, ...conn }) => {
@@ -1469,7 +1481,7 @@ ${result.stderr}`);
     {
       ...connectionParams,
       localPath: z.string().describe("Path to the local file to upload"),
-      remotePath: z.string().describe("Absolute path on the remote host")
+      remotePath: AbsoluteRemotePathSchema.describe("Absolute path on the remote host. Must start with /.")
     },
     async ({ localPath, remotePath, ...conn }) => {
       return connectionPool.withConnection(conn, async (client) => {
@@ -1483,7 +1495,7 @@ ${result.stderr}`);
     "Download a file from a remote host to local filesystem via SFTP.",
     {
       ...connectionParams,
-      remotePath: z.string().describe("Absolute path to the remote file"),
+      remotePath: AbsoluteRemotePathSchema.describe("Absolute path to the remote file. Must start with /."),
       localPath: z.string().describe("Local path to save the downloaded file")
     },
     async ({ remotePath, localPath, ...conn }) => {
@@ -1498,7 +1510,7 @@ ${result.stderr}`);
     "List files in a directory on a remote host via SFTP.",
     {
       ...connectionParams,
-      path: z.string().describe("Absolute path to the remote directory")
+      path: AbsoluteRemotePathSchema.describe("Absolute path to the remote directory. Must start with /.")
     },
     async ({ path, ...conn }) => {
       return connectionPool.withConnection(conn, async (client) => {
@@ -1512,7 +1524,7 @@ ${result.stderr}`);
     "Get metadata for a file or directory on a remote host via SFTP. Returns size, permissions (octal), uid/gid, mtime/atime, and type flags (isFile, isDirectory, isSymbolicLink). Use this instead of parsing `ls -la` output.",
     {
       ...connectionParams,
-      path: z.string().describe("Absolute path to the remote file or directory")
+      path: AbsoluteRemotePathSchema.describe("Absolute path to the remote file or directory. Must start with /.")
     },
     async ({ path, ...conn }) => {
       return connectionPool.withConnection(conn, async (client) => {
@@ -1549,7 +1561,9 @@ ${result.stderr}`);
     "Delete a file or empty directory on a remote host via SFTP. Auto-detects the path type and calls the right SFTP op (unlink for files/symlinks, rmdir for empty dirs). Recursive directory delete is intentionally NOT supported -- for that, use ssh_exec with `rm -rf` explicitly so the destructive intent is visible in the tool trace.",
     {
       ...connectionParams,
-      path: z.string().describe("Absolute path of the file or empty directory to delete")
+      path: AbsoluteRemotePathSchema.describe(
+        "Absolute path of the file or empty directory to delete. Must start with /."
+      )
     },
     async ({ path, ...conn }) => {
       return connectionPool.withConnection(conn, async (client) => {
@@ -1824,8 +1838,7 @@ ${files.join("\n")}` }] };
 }
 
 // src/server.ts
-var pkgPath = join4(dirname(fileURLToPath(import.meta.url)), "..", "package.json");
-var { version } = JSON.parse(readFileSync4(pkgPath, "utf8"));
+var version = typeof __VERSION__ !== "undefined" ? __VERSION__ : JSON.parse(readFileSync4(join4(dirname(fileURLToPath(import.meta.url)), "..", "package.json"), "utf8")).version;
 function createServer(pool) {
   const server = new McpServer({
     name: "ssh-mcp",
@@ -1836,6 +1849,10 @@ function createServer(pool) {
 }
 
 // src/index.ts
+if (process.argv[2] === "--version" || process.argv[2] === "version") {
+  console.log(version);
+  process.exit(0);
+}
 async function main() {
   const pool = new ConnectionPool();
   const server = createServer(pool);

package/dist/server.d.ts

@@ -217,6 +217,7 @@ declare function isPolicyConfigured(): boolean;
 
 declare function registerTools(server: McpServer, pool?: ConnectionPool): void;
 
+declare const version: string;
 declare function createServer(pool?: ConnectionPool): McpServer;
 
-export { type AgentResult, type ConfigLookupResult, ConnectionPool, type DiagnosticReport, type DiagnosticResult, type ExecResult, type FileStats, type FindOptions, type KeyInfo, type MultiExecHost, type MultiExecResult, type PoolOptions, type ResolvedConfig, type SSHConfig, type ServiceStatus, checkConnectivity, checkGitSsh, checkKnownHosts, checkSshAgent, checkSshConfig, checkSshKeys, configLookup, connect, connectRaw, connectWithProxy, createServer, deleteFile, diagnose, downloadFile, enforcePolicy, ensureAgent, exec, find, fixKnownHosts, formatDiagnostics, isPolicyConfigured, listDir, listSshKeys, loadKey, makeDir, multiExec, readFile, readKnownHostsKeys, registerTools, resolveConfig, serviceStatus, statFile, tail, testConnection, uploadFile, writeFile };
+export { type AgentResult, type ConfigLookupResult, ConnectionPool, type DiagnosticReport, type DiagnosticResult, type ExecResult, type FileStats, type FindOptions, type KeyInfo, type MultiExecHost, type MultiExecResult, type PoolOptions, type ResolvedConfig, type SSHConfig, type ServiceStatus, checkConnectivity, checkGitSsh, checkKnownHosts, checkSshAgent, checkSshConfig, checkSshKeys, configLookup, connect, connectRaw, connectWithProxy, createServer, deleteFile, diagnose, downloadFile, enforcePolicy, ensureAgent, exec, find, fixKnownHosts, formatDiagnostics, isPolicyConfigured, listDir, listSshKeys, loadKey, makeDir, multiExec, readFile, readKnownHostsKeys, registerTools, resolveConfig, serviceStatus, statFile, tail, testConnection, uploadFile, version, writeFile };

package/dist/server.js

@@ -212,8 +212,6 @@ function checkSshConfig(host) {
         if (inHostBlock) hostConfig.push(trimmed);
       } else if (inHostBlock && trimmed) {
         hostConfig.push(trimmed);
-      } else if (inHostBlock && !trimmed) {
-        inHostBlock = false;
       }
     }
     if (hostConfig.length === 0) {
@@ -608,7 +606,15 @@ import { readFileSync as readFileSync3 } from "fs";
 import { homedir as homedir3 } from "os";
 import { join as join3 } from "path";
 import { Client } from "ssh2";
+var sshConfigCache = /* @__PURE__ */ new Map();
 function resolveFromSshConfig(host) {
+  const cached = sshConfigCache.get(host);
+  if (cached !== void 0) return cached;
+  const result = resolveFromSshConfigUncached(host);
+  sshConfigCache.set(host, result);
+  return result;
+}
+function resolveFromSshConfigUncached(host) {
   try {
     const { stdout, ok } = runArgs("ssh", ["-G", host]);
     if (!ok) return null;
@@ -688,8 +694,10 @@ function resolveConfig(config) {
     keepaliveCountMax: 3,
     hostVerifier: buildHostVerifier(verifierHosts, port)
   };
+  const home = homedir3();
   if (config.privateKeyPath) {
-    connectConfig.privateKey = readFileSync3(config.privateKeyPath);
+    const keyPath = config.privateKeyPath.startsWith("~") ? join3(home, config.privateKeyPath.slice(1)) : config.privateKeyPath;
+    connectConfig.privateKey = readFileSync3(keyPath);
   } else if (config.password) {
     connectConfig.password = config.password;
   } else {
@@ -697,7 +705,6 @@ function resolveConfig(config) {
     if (agentSock) {
       connectConfig.agent = agentSock;
     }
-    const home = homedir3();
     const keyPaths = sshConfig && sshConfig.identityFiles.length > 0 ? sshConfig.identityFiles.map((p) => p.startsWith("~") ? join3(home, p.slice(1)) : p) : [join3(home, ".ssh", "id_ed25519"), join3(home, ".ssh", "id_rsa"), join3(home, ".ssh", "id_ecdsa")];
     for (const keyPath of keyPaths) {
       try {
@@ -952,10 +959,11 @@ async function writeFile(client, remotePath, content) {
   }
 }
 async function uploadFile(client, localPath, remotePath) {
+  const resolvedLocal = localPath.startsWith("~") ? join3(homedir3(), localPath.slice(1)) : localPath;
   const sftp = await getSftp(client);
   try {
     await new Promise((resolve, reject) => {
-      sftp.fastPut(localPath, remotePath, (err) => {
+      sftp.fastPut(resolvedLocal, remotePath, (err) => {
         if (err) return reject(err);
         resolve();
       });
@@ -965,10 +973,11 @@ async function uploadFile(client, localPath, remotePath) {
   }
 }
 async function downloadFile(client, remotePath, localPath) {
+  const resolvedLocal = localPath.startsWith("~") ? join3(homedir3(), localPath.slice(1)) : localPath;
   const sftp = await getSftp(client);
   try {
     await new Promise((resolve, reject) => {
-      sftp.fastGet(remotePath, localPath, (err) => {
+      sftp.fastGet(remotePath, resolvedLocal, (err) => {
         if (err) return reject(err);
         resolve();
       });
@@ -1088,16 +1097,16 @@ async function multiExec(pool, hosts, command, timeoutMs = 3e4) {
     };
   });
 }
-var VALID_FIND_SIZE = /^\d+[kMGTP]?$/;
+var VALID_FIND_SIZE = /^\d+[cwbkMG]?$/;
 async function find(client, options, timeoutMs = 3e4) {
   if (options.minsize && !VALID_FIND_SIZE.test(options.minsize)) {
     throw new Error(
-      `Invalid minsize format: "${options.minsize}". Expected: digits followed by optional k/M/G/T/P (e.g. "1M", "100k")`
+      `Invalid minsize format: "${options.minsize}". Expected: digits followed by optional c/w/b/k/M/G (e.g. "1M", "100k")`
     );
   }
   if (options.maxsize && !VALID_FIND_SIZE.test(options.maxsize)) {
     throw new Error(
-      `Invalid maxsize format: "${options.maxsize}". Expected: digits followed by optional k/M/G/T/P (e.g. "10M", "500k")`
+      `Invalid maxsize format: "${options.maxsize}". Expected: digits followed by optional c/w/b/k/M/G (e.g. "10M", "500k")`
     );
   }
   const args = ["--", shellQuote(options.path)];
@@ -1392,6 +1401,9 @@ ${diag}`);
 
 // src/tools.ts
 var HostSchema = z.string().describe("SSH hostname or IP address");
+var AbsoluteRemotePathSchema = z.string().refine((p) => p.startsWith("/"), {
+  message: "Path must be absolute (start with /). SFTP does not expand ~ or resolve relative paths through a shell."
+});
 var PortSchema = z.number().int().min(1).max(65535).optional().describe("SSH port (default: 22)");
 var UsernameSchema = z.string().optional().describe("SSH username (default: current user)");
 var KeyPathSchema = z.string().optional().describe("Path to SSH private key");
@@ -1459,7 +1471,7 @@ ${result.stderr}`);
     "Write content to a file on a remote host via SFTP. Creates or overwrites the file.",
     {
       ...connectionParams,
-      path: z.string().describe("Absolute path to the remote file"),
+      path: AbsoluteRemotePathSchema.describe("Absolute path to the remote file. Must start with /."),
       content: z.string().describe("File content to write")
     },
     async ({ path, content, ...conn }) => {
@@ -1475,7 +1487,7 @@ ${result.stderr}`);
     {
       ...connectionParams,
       localPath: z.string().describe("Path to the local file to upload"),
-      remotePath: z.string().describe("Absolute path on the remote host")
+      remotePath: AbsoluteRemotePathSchema.describe("Absolute path on the remote host. Must start with /.")
     },
     async ({ localPath, remotePath, ...conn }) => {
       return connectionPool.withConnection(conn, async (client) => {
@@ -1489,7 +1501,7 @@ ${result.stderr}`);
     "Download a file from a remote host to local filesystem via SFTP.",
     {
       ...connectionParams,
-      remotePath: z.string().describe("Absolute path to the remote file"),
+      remotePath: AbsoluteRemotePathSchema.describe("Absolute path to the remote file. Must start with /."),
       localPath: z.string().describe("Local path to save the downloaded file")
     },
     async ({ remotePath, localPath, ...conn }) => {
@@ -1504,7 +1516,7 @@ ${result.stderr}`);
     "List files in a directory on a remote host via SFTP.",
     {
       ...connectionParams,
-      path: z.string().describe("Absolute path to the remote directory")
+      path: AbsoluteRemotePathSchema.describe("Absolute path to the remote directory. Must start with /.")
     },
     async ({ path, ...conn }) => {
       return connectionPool.withConnection(conn, async (client) => {
@@ -1518,7 +1530,7 @@ ${result.stderr}`);
     "Get metadata for a file or directory on a remote host via SFTP. Returns size, permissions (octal), uid/gid, mtime/atime, and type flags (isFile, isDirectory, isSymbolicLink). Use this instead of parsing `ls -la` output.",
     {
       ...connectionParams,
-      path: z.string().describe("Absolute path to the remote file or directory")
+      path: AbsoluteRemotePathSchema.describe("Absolute path to the remote file or directory. Must start with /.")
     },
     async ({ path, ...conn }) => {
       return connectionPool.withConnection(conn, async (client) => {
@@ -1555,7 +1567,9 @@ ${result.stderr}`);
     "Delete a file or empty directory on a remote host via SFTP. Auto-detects the path type and calls the right SFTP op (unlink for files/symlinks, rmdir for empty dirs). Recursive directory delete is intentionally NOT supported -- for that, use ssh_exec with `rm -rf` explicitly so the destructive intent is visible in the tool trace.",
     {
       ...connectionParams,
-      path: z.string().describe("Absolute path of the file or empty directory to delete")
+      path: AbsoluteRemotePathSchema.describe(
+        "Absolute path of the file or empty directory to delete. Must start with /."
+      )
     },
     async ({ path, ...conn }) => {
       return connectionPool.withConnection(conn, async (client) => {
@@ -1830,8 +1844,7 @@ ${files.join("\n")}` }] };
 }
 
 // src/server.ts
-var pkgPath = join4(dirname(fileURLToPath(import.meta.url)), "..", "package.json");
-var { version } = JSON.parse(readFileSync4(pkgPath, "utf8"));
+var version = typeof __VERSION__ !== "undefined" ? __VERSION__ : JSON.parse(readFileSync4(join4(dirname(fileURLToPath(import.meta.url)), "..", "package.json"), "utf8")).version;
 function createServer(pool) {
   const server = new McpServer({
     name: "ssh-mcp",
@@ -1877,5 +1890,6 @@ export {
   tail,
   testConnection,
   uploadFile,
+  version,
   writeFile
 };

package/package.json

@@ -1,62 +1,68 @@
-{
-  "name": "@yawlabs/ssh-mcp",
-  "version": "0.11.5",
-  "mcpName": "io.github.YawLabs/ssh-mcp",
-  "description": "MCP server for SSH operations with built-in diagnostics",
-  "type": "module",
-  "bin": {
-    "ssh-mcp": "dist/index.js"
-  },
-  "exports": {
-    ".": {
-      "import": "./dist/server.js",
-      "types": "./dist/server.d.ts"
-    }
-  },
-  "files": [
-    "dist",
-    "LICENSE",
-    "README.md"
-  ],
-  "scripts": {
-    "build": "tsup",
-    "dev": "tsup --watch",
-    "lint": "biome check src/",
-    "lint:fix": "biome check --write src/",
-    "typecheck": "tsc --noEmit",
-    "test": "vitest run",
-    "test:integration": "docker compose -f test/docker/docker-compose.yml up -d --build --wait && SSH_MCP_INTEGRATION=1 vitest run src/tests/integration.test.ts; docker compose -f test/docker/docker-compose.yml down",
-    "test:ci": "npm run build && npm test",
-    "prepublishOnly": "npm run build"
-  },
-  "keywords": [
-    "mcp",
-    "ssh",
-    "remote",
-    "model-context-protocol",
-    "ai",
-    "devops"
-  ],
-  "author": "Yaw Labs <contact@yaw.sh>",
-  "license": "MIT",
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/YawLabs/ssh-mcp.git"
-  },
-  "engines": {
-    "node": ">=18"
-  },
-  "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.29.0",
-    "ssh2": "^1.17.0",
-    "zod": "^4.4.3"
-  },
-  "devDependencies": {
-    "@biomejs/biome": "^2.4.15",
-    "@types/node": "^25.7.0",
-    "@types/ssh2": "^1.15.5",
-    "tsup": "^8.5.1",
-    "typescript": "^6.0.3",
-    "vitest": "^4.1.6"
-  }
-}
+{
+  "name": "@yawlabs/ssh-mcp",
+  "version": "0.13.0",
+  "mcpName": "io.github.YawLabs/ssh-mcp",
+  "description": "MCP server for SSH operations with built-in diagnostics",
+  "type": "module",
+  "bin": {
+    "ssh-mcp": "bin/ssh-mcp.mjs"
+  },
+  "exports": {
+    ".": {
+      "import": "./dist/server.js",
+      "types": "./dist/server.d.ts"
+    }
+  },
+  "files": [
+    "bin/ssh-mcp.mjs",
+    "dist",
+    "LICENSE",
+    "README.md"
+  ],
+  "scripts": {
+    "build": "tsup",
+    "dev": "tsup --watch",
+    "lint": "biome check src/",
+    "lint:fix": "biome check --write src/",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run",
+    "test:integration": "docker compose -f test/docker/docker-compose.yml up -d --build --wait && SSH_MCP_INTEGRATION=1 vitest run src/tests/integration.test.ts; docker compose -f test/docker/docker-compose.yml down",
+    "test:ci": "npm run build && npm test",
+    "prepublishOnly": "npm run build"
+  },
+  "keywords": [
+    "mcp",
+    "ssh",
+    "remote",
+    "model-context-protocol",
+    "ai",
+    "devops"
+  ],
+  "author": "Yaw Labs <contact@yaw.sh>",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/YawLabs/ssh-mcp.git"
+  },
+  "engines": {
+    "node": ">=18"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.29.0",
+    "ssh2": "^1.17.0",
+    "zod": "^4.4.3"
+  },
+  "devDependencies": {
+    "@biomejs/biome": "^2.4.15",
+    "@types/node": "^26.1.1",
+    "@types/ssh2": "^1.15.5",
+    "esbuild": "^0.28.1",
+    "postject": "^1.0.0-alpha.6",
+    "tsup": "^8.5.1",
+    "typescript": "^7.0.2",
+    "vitest": "^4.1.6"
+  },
+  "overrides": {
+    "esbuild": "^0.28.1"
+  }
+}