smooth-ssh-mcp 0.1.1

package/dist/init.d.ts

@@ -0,0 +1,21 @@
+export type InitActionStatus = "created" | "exists";
+export type InitAction = {
+    id: string;
+    label: string;
+    path: string;
+    status: InitActionStatus;
+};
+export type InitReport = {
+    ok: boolean;
+    actions: InitAction[];
+    nextSteps: string[];
+};
+type InitOptions = {
+    configPath?: string;
+    secretsPath?: string;
+    force?: boolean;
+    env?: NodeJS.ProcessEnv;
+};
+export declare function runInit(options?: InitOptions): InitReport;
+export declare function formatInitReport(report: InitReport): string;
+export {};

package/dist/init.js

@@ -0,0 +1,80 @@
+import { chmodSync, existsSync, mkdirSync, writeFileSync } from "node:fs";
+import { dirname } from "node:path";
+import { defaultInventoryPath } from "./inventory.js";
+const HOSTS_TEMPLATE = `hosts:
+  - id: example-host
+    hostname: 192.0.2.10
+    user: ubuntu
+    port: 22
+    identityFile: ~/.ssh/id_ed25519
+    environment: dev
+    tags: [example]
+    capabilities:
+      sudo: true
+      systemd: true
+    policy:
+      allowExec: true
+      allowPty: true
+      allowUpload: false
+      allowDownload: false
+      allowForward: false
+      acceptNewHostKey: false
+      permissionLevel: 2
+      maxCommandSeconds: 30
+      maxOutputBytes: 65536
+`;
+const SECRETS_TEMPLATE = `# Optional password-based host secrets. Prefer SSH keys when possible.
+# Example inventory value: passwordEnv: SMOOTH_SSH_PASSWORD_EXAMPLE_HOST
+SMOOTH_SSH_PASSWORD_EXAMPLE_HOST=change-me
+`;
+export function runInit(options = {}) {
+    const env = options.env ?? process.env;
+    const configPath = expandHome(options.configPath ?? defaultInventoryPath(), env);
+    const secretsPath = expandHome(options.secretsPath ?? env.SMOOTH_SSH_MCP_SECRETS ?? "~/.config/smooth-ssh-mcp/secrets.env", env);
+    const configDir = dirname(configPath);
+    const actions = [];
+    if (existsSync(configDir)) {
+        actions.push({ id: "config-dir", label: "Config directory", path: configDir, status: "exists" });
+    }
+    else {
+        mkdirSync(configDir, { recursive: true, mode: 0o700 });
+        actions.push({ id: "config-dir", label: "Config directory", path: configDir, status: "created" });
+    }
+    actions.push(writeTemplate("hosts", "Hosts inventory", configPath, HOSTS_TEMPLATE, options.force));
+    actions.push(writeTemplate("secrets", "Secrets file", secretsPath, SECRETS_TEMPLATE, options.force));
+    return {
+        ok: true,
+        actions,
+        nextSteps: [
+            `Edit ${configPath} with your real hosts.`,
+            `Run: smooth-ssh-mcp doctor --config ${configPath} --secrets ${secretsPath}`,
+            "Add smooth-ssh-mcp to your MCP client configuration."
+        ]
+    };
+}
+export function formatInitReport(report) {
+    const lines = [
+        "smooth-ssh-mcp init: ok",
+        ...report.actions.map((action) => `[${action.status}] ${action.label}: ${action.path}`),
+        "next steps:",
+        ...report.nextSteps.map((step) => `- ${step}`)
+    ];
+    return lines.join("\n");
+}
+function writeTemplate(id, label, path, text, force = false) {
+    if (existsSync(path) && !force) {
+        return { id, label, path, status: "exists" };
+    }
+    mkdirSync(dirname(path), { recursive: true, mode: 0o700 });
+    writeFileSync(path, text, { encoding: "utf8", mode: 0o600 });
+    chmodSync(path, 0o600);
+    return { id, label, path, status: "created" };
+}
+function expandHome(path, env) {
+    if (path === "~")
+        return env.HOME ?? path;
+    if (path.startsWith("~/"))
+        return `${env.HOME ?? ""}${path.slice(1)}`;
+    return path;
+}
+//# sourceMappingURL=init.js.map

package/dist/init.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.js","sourceRoot":"","sources":["../src/init.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC1E,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAwBtD,MAAM,cAAc,GAAG;;;;;;;;;;;;;;;;;;;;;CAqBtB,CAAC;AAEF,MAAM,gBAAgB,GAAG;;;CAGxB,CAAC;AAEF,MAAM,UAAU,OAAO,CAAC,UAAuB,EAAE;IAC/C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,MAAM,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,UAAU,IAAI,oBAAoB,EAAE,EAAE,GAAG,CAAC,CAAC;IACjF,MAAM,WAAW,GAAG,UAAU,CAAC,OAAO,CAAC,WAAW,IAAI,GAAG,CAAC,sBAAsB,IAAI,sCAAsC,EAAE,GAAG,CAAC,CAAC;IACjI,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACtC,MAAM,OAAO,GAAiB,EAAE,CAAC;IAEjC,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,kBAAkB,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IACnG,CAAC;SAAM,CAAC;QACN,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACvD,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,kBAAkB,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IACpG,CAAC;IAED,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,cAAc,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IACnG,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,cAAc,EAAE,WAAW,EAAE,gBAAgB,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IAErG,OAAO;QACL,EAAE,EAAE,IAAI;QACR,OAAO;QACP,SAAS,EAAE;YACT,QAAQ,UAAU,wBAAwB;YAC1C,uCAAuC,UAAU,cAAc,WAAW,EAAE;YAC5E,sDAAsD;SACvD;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,MAAkB;IACjD,MAAM,KAAK,GAAG;QACZ,yBAAyB;QACzB,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,KAAK,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC;QACvF,aAAa;QACb,GAAG,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC;KAC/C,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,aAAa,CAAC,EAAU,EAAE,KAAa,EAAE,IAAY,EAAE,IAAY,EAAE,KAAK,GAAG,KAAK;IACzF,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QAC/B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAC/C,CAAC;IACD,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3D,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7D,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACvB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;AAChD,CAAC;AAED,SAAS,UAAU,CAAC,IAAY,EAAE,GAAsB;IACtD,IAAI,IAAI,KAAK,GAAG;QAAE,OAAO,GAAG,CAAC,IAAI,IAAI,IAAI,CAAC;IAC1C,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IACtE,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/inventory.d.ts

@@ -0,0 +1,4 @@
+import type { Host, Inventory } from "./types.js";
+export declare function loadInventory(path: string): Inventory;
+export declare function findHost(inventory: Inventory, hostId: string): Host;
+export declare function defaultInventoryPath(): string;

package/dist/inventory.js

@@ -0,0 +1,262 @@
+import { existsSync, readFileSync } from "node:fs";
+import { extname, resolve } from "node:path";
+import { parse as parseYaml } from "yaml";
+const HOST_ID_PATTERN = /^[A-Za-z0-9._-]+$/;
+const SAFE_SSH_TOKEN_PATTERN = /^[^\s\0\r\n;|&`$<>]+$/;
+const DEFAULT_POLICY = {
+    allowExec: true,
+    allowPty: true,
+    allowUpload: false,
+    allowDownload: false,
+    allowForward: false,
+    acceptNewHostKey: false,
+    requireConfirmForSudo: true,
+    requireConfirmForWrite: true,
+    requireConfirmForProd: true,
+    permissionLevel: 2,
+    deniedCommandPatterns: [],
+    maxCommandSeconds: 30,
+    maxOutputBytes: 64 * 1024
+};
+const POLICY_KEYS = new Set([
+    "allowExec",
+    "allowPty",
+    "allowUpload",
+    "allowDownload",
+    "allowForward",
+    "acceptNewHostKey",
+    "requireConfirmForSudo",
+    "requireConfirmForWrite",
+    "requireConfirmForProd",
+    "permissionLevel",
+    "deniedCommandPatterns",
+    "maxCommandSeconds",
+    "maxOutputBytes"
+]);
+export function loadInventory(path) {
+    const resolved = resolve(expandHome(path));
+    if (!existsSync(resolved)) {
+        throw new Error(`Inventory file does not exist: ${resolved}`);
+    }
+    const text = readFileSync(resolved, "utf8");
+    const raw = parseInventory(text, resolved);
+    const hosts = (raw.hosts ?? []).map(normalizeHost);
+    const ids = new Set();
+    for (const host of hosts) {
+        if (ids.has(host.id)) {
+            throw new Error(`Duplicate host id in inventory: ${host.id}`);
+        }
+        ids.add(host.id);
+    }
+    return { hosts };
+}
+export function findHost(inventory, hostId) {
+    const host = inventory.hosts.find((candidate) => candidate.id === hostId);
+    if (!host) {
+        throw new Error(`Host not found in inventory: ${hostId}`);
+    }
+    return host;
+}
+export function defaultInventoryPath() {
+    return process.env.SMOOTH_SSH_MCP_CONFIG ?? "~/.config/smooth-ssh-mcp/hosts.yaml";
+}
+function parseInventory(text, path) {
+    if (extname(path).toLowerCase() === ".json") {
+        return JSON.parse(text);
+    }
+    return parseYaml(text);
+}
+function normalizeHost(raw) {
+    if (raw.password !== undefined) {
+        throw new Error("Inline password is not allowed. Use passwordEnv to reference an environment variable.");
+    }
+    const id = requiredString(raw.id, "host id");
+    if (!HOST_ID_PATTERN.test(id)) {
+        throw new Error(`Invalid host id "${id}". Use letters, numbers, dots, underscores, and dashes only.`);
+    }
+    if (id.startsWith("-")) {
+        throw new Error(`Invalid host id "${id}": leading dash is not allowed`);
+    }
+    const hostname = optionalString(raw.hostname) ?? optionalString(raw.host);
+    const sshConfigHost = optionalString(raw.sshConfigHost);
+    if (!hostname && !sshConfigHost) {
+        throw new Error(`Host ${id} must define hostname or sshConfigHost`);
+    }
+    if (hostname)
+        validateSshToken(hostname, `hostname for ${id}`);
+    if (sshConfigHost)
+        validateSshToken(sshConfigHost, `sshConfigHost for ${id}`);
+    const port = optionalNumber(raw.port);
+    if (port !== undefined && (!Number.isInteger(port) || port < 1 || port > 65535)) {
+        throw new Error(`Invalid port for ${id}: ${port}`);
+    }
+    const user = optionalString(raw.user);
+    if (user)
+        validateSshToken(user, `user for ${id}`);
+    const identityFile = optionalString(raw.identityFile) ?? optionalString(raw.keyPath);
+    const passwordEnv = optionalString(raw.passwordEnv);
+    if (passwordEnv)
+        validateEnvName(passwordEnv, `passwordEnv for ${id}`);
+    if (identityFile && passwordEnv) {
+        throw new Error(`Host ${id} must not define both identityFile and passwordEnv`);
+    }
+    const proxyJump = optionalString(raw.proxyJump);
+    if (proxyJump)
+        validateSshToken(proxyJump, `proxyJump for ${id}`);
+    const environment = normalizeEnvironment(optionalString(raw.environment));
+    const policy = mergePolicy(raw.policy);
+    return {
+        id,
+        hostname: hostname ?? sshConfigHost ?? id,
+        port,
+        user,
+        identityFile: identityFile ? expandHome(identityFile) : undefined,
+        passwordEnv,
+        sshConfigHost,
+        proxyJump,
+        defaultCwd: optionalString(raw.defaultCwd),
+        tags: normalizeStringArray(raw.tags),
+        environment,
+        riskLevel: normalizeRisk(optionalString(raw.riskLevel), environment),
+        capabilities: normalizeCapabilities(raw.capabilities),
+        policy
+    };
+}
+function mergePolicy(raw) {
+    if (!raw || typeof raw !== "object" || Array.isArray(raw)) {
+        return { ...DEFAULT_POLICY };
+    }
+    const value = raw;
+    validatePolicyKeys(value);
+    return {
+        allowExec: optionalPolicyBoolean(value, "allowExec", DEFAULT_POLICY.allowExec),
+        allowPty: optionalPolicyBoolean(value, "allowPty", DEFAULT_POLICY.allowPty),
+        allowUpload: optionalPolicyBoolean(value, "allowUpload", DEFAULT_POLICY.allowUpload),
+        allowDownload: optionalPolicyBoolean(value, "allowDownload", DEFAULT_POLICY.allowDownload),
+        allowForward: optionalPolicyBoolean(value, "allowForward", DEFAULT_POLICY.allowForward),
+        acceptNewHostKey: optionalPolicyBoolean(value, "acceptNewHostKey", DEFAULT_POLICY.acceptNewHostKey),
+        requireConfirmForSudo: optionalPolicyBoolean(value, "requireConfirmForSudo", DEFAULT_POLICY.requireConfirmForSudo),
+        requireConfirmForWrite: optionalPolicyBoolean(value, "requireConfirmForWrite", DEFAULT_POLICY.requireConfirmForWrite),
+        requireConfirmForProd: optionalPolicyBoolean(value, "requireConfirmForProd", DEFAULT_POLICY.requireConfirmForProd),
+        permissionLevel: optionalPolicyPermissionLevel(value, DEFAULT_POLICY.permissionLevel),
+        deniedCommandPatterns: optionalPolicyStringArray(value, "deniedCommandPatterns", DEFAULT_POLICY.deniedCommandPatterns),
+        maxCommandSeconds: optionalPolicyNumber(value, "maxCommandSeconds", DEFAULT_POLICY.maxCommandSeconds),
+        maxOutputBytes: optionalPolicyNumber(value, "maxOutputBytes", DEFAULT_POLICY.maxOutputBytes)
+    };
+}
+function validatePolicyKeys(raw) {
+    for (const key of Object.keys(raw)) {
+        if (!POLICY_KEYS.has(key)) {
+            throw new Error(`Invalid policy.${key}: unsupported policy key`);
+        }
+    }
+}
+function normalizeEnvironment(value) {
+    if (value === "dev" || value === "staging" || value === "prod")
+        return value;
+    return "unknown";
+}
+function normalizeRisk(value, environment) {
+    if (value === "low" || value === "medium" || value === "high")
+        return value;
+    if (environment === "prod")
+        return "high";
+    if (environment === "unknown")
+        return "medium";
+    return "low";
+}
+function normalizeCapabilities(raw) {
+    if (!raw || typeof raw !== "object" || Array.isArray(raw))
+        return undefined;
+    const input = raw;
+    return {
+        sudo: optionalBoolean(input.sudo),
+        docker: optionalBoolean(input.docker),
+        nginx: optionalBoolean(input.nginx),
+        systemd: optionalBoolean(input.systemd),
+        openwrt: optionalBoolean(input.openwrt)
+    };
+}
+function normalizeStringArray(value) {
+    if (!Array.isArray(value))
+        return [];
+    return value.map(String).filter(Boolean);
+}
+function requiredString(value, label) {
+    const result = optionalString(value);
+    if (!result)
+        throw new Error(`Missing ${label}`);
+    return result;
+}
+function optionalString(value) {
+    if (typeof value !== "string")
+        return undefined;
+    const trimmed = value.trim();
+    return trimmed.length > 0 ? trimmed : undefined;
+}
+function optionalNumber(value) {
+    if (typeof value === "number")
+        return value;
+    if (typeof value === "string" && value.trim() !== "")
+        return Number(value);
+    return undefined;
+}
+function optionalBoolean(value) {
+    return typeof value === "boolean" ? value : undefined;
+}
+function validateSshToken(value, label) {
+    if (value.startsWith("-")) {
+        throw new Error(`Invalid ${label}: leading dash is not allowed`);
+    }
+    if (!SAFE_SSH_TOKEN_PATTERN.test(value)) {
+        throw new Error(`Invalid ${label}: contains whitespace or shell metacharacters`);
+    }
+}
+function validateEnvName(value, label) {
+    if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(value)) {
+        throw new Error(`Invalid ${label}: expected an environment variable name`);
+    }
+}
+function optionalPolicyBoolean(raw, key, fallback) {
+    const value = raw[key];
+    if (value === undefined)
+        return fallback;
+    if (typeof value !== "boolean")
+        throw new Error(`Invalid policy.${key}: expected boolean`);
+    return value;
+}
+function optionalPolicyNumber(raw, key, fallback) {
+    const value = raw[key];
+    if (value === undefined)
+        return fallback;
+    if (typeof value !== "number" || !Number.isFinite(value) || value <= 0) {
+        throw new Error(`Invalid policy.${key}: expected positive number`);
+    }
+    return value;
+}
+function optionalPolicyStringArray(raw, key, fallback) {
+    const value = raw[key];
+    if (value === undefined)
+        return fallback;
+    if (!Array.isArray(value) || value.some((entry) => typeof entry !== "string")) {
+        throw new Error(`Invalid policy.${key}: expected string array`);
+    }
+    return value;
+}
+function optionalPolicyPermissionLevel(raw, fallback) {
+    const value = raw.permissionLevel;
+    if (value === 1 || value === 2 || value === 3)
+        return value;
+    if (value !== undefined) {
+        throw new Error("Invalid policy.permissionLevel: expected 1, 2, or 3");
+    }
+    return fallback;
+}
+function expandHome(path) {
+    if (path === "~")
+        return process.env.HOME ?? path;
+    if (path.startsWith("~/"))
+        return `${process.env.HOME ?? "~"}${path.slice(1)}`;
+    return path;
+}
+//# sourceMappingURL=inventory.js.map

package/dist/inventory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inventory.js","sourceRoot":"","sources":["../src/inventory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAG1C,MAAM,eAAe,GAAG,mBAAmB,CAAC;AAC5C,MAAM,sBAAsB,GAAG,uBAAuB,CAAC;AAEvD,MAAM,cAAc,GAAe;IACjC,SAAS,EAAE,IAAI;IACf,QAAQ,EAAE,IAAI;IACd,WAAW,EAAE,KAAK;IAClB,aAAa,EAAE,KAAK;IACpB,YAAY,EAAE,KAAK;IACnB,gBAAgB,EAAE,KAAK;IACvB,qBAAqB,EAAE,IAAI;IAC3B,sBAAsB,EAAE,IAAI;IAC5B,qBAAqB,EAAE,IAAI;IAC3B,eAAe,EAAE,CAAC;IAClB,qBAAqB,EAAE,EAAE;IACzB,iBAAiB,EAAE,EAAE;IACrB,cAAc,EAAE,EAAE,GAAG,IAAI;CAC1B,CAAC;AAEF,MAAM,WAAW,GAAG,IAAI,GAAG,CAAmB;IAC5C,WAAW;IACX,UAAU;IACV,aAAa;IACb,eAAe;IACf,cAAc;IACd,kBAAkB;IAClB,uBAAuB;IACvB,wBAAwB;IACxB,uBAAuB;IACvB,iBAAiB;IACjB,uBAAuB;IACvB,mBAAmB;IACnB,gBAAgB;CACjB,CAAC,CAAC;AAMH,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3C,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,kCAAkC,QAAQ,EAAE,CAAC,CAAC;IAChE,CAAC;IAED,MAAM,IAAI,GAAG,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC5C,MAAM,GAAG,GAAG,cAAc,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IACnD,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAE9B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,mCAAmC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QAChE,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnB,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,SAAoB,EAAE,MAAc;IAC3D,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC;IAC1E,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,gCAAgC,MAAM,EAAE,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,oBAAoB;IAClC,OAAO,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,qCAAqC,CAAC;AACpF,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,IAAY;IAChD,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,KAAK,OAAO,EAAE,CAAC;QAC5C,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAiB,CAAC;IAC1C,CAAC;IACD,OAAO,SAAS,CAAC,IAAI,CAAiB,CAAC;AACzC,CAAC;AAED,SAAS,aAAa,CAAC,GAA4B;IACjD,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,uFAAuF,CAAC,CAAC;IAC3G,CAAC;IAED,MAAM,EAAE,GAAG,cAAc,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;IAC7C,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,oBAAoB,EAAE,8DAA8D,CAAC,CAAC;IACxG,CAAC;IACD,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,oBAAoB,EAAE,gCAAgC,CAAC,CAAC;IAC1E,CAAC;IAED,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC1E,MAAM,aAAa,GAAG,cAAc,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IACxD,IAAI,CAAC,QAAQ,IAAI,CAAC,aAAa,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,wCAAwC,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,QAAQ;QAAE,gBAAgB,CAAC,QAAQ,EAAE,gBAAgB,EAAE,EAAE,CAAC,CAAC;IAC/D,IAAI,aAAa;QAAE,gBAAgB,CAAC,aAAa,EAAE,qBAAqB,EAAE,EAAE,CAAC,CAAC;IAE9E,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,KAAK,CAAC,EAAE,CAAC;QAChF,MAAM,IAAI,KAAK,CAAC,oBAAoB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;IACrD,CAAC;IAED,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,IAAI;QAAE,gBAAgB,CAAC,IAAI,EAAE,YAAY,EAAE,EAAE,CAAC,CAAC;IAEnD,MAAM,YAAY,GAAG,cAAc,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACrF,MAAM,WAAW,GAAG,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACpD,IAAI,WAAW;QAAE,eAAe,CAAC,WAAW,EAAE,mBAAmB,EAAE,EAAE,CAAC,CAAC;IACvE,IAAI,YAAY,IAAI,WAAW,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,oDAAoD,CAAC,CAAC;IAClF,CAAC;IACD,MAAM,SAAS,GAAG,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAChD,IAAI,SAAS;QAAE,gBAAgB,CAAC,SAAS,EAAE,iBAAiB,EAAE,EAAE,CAAC,CAAC;IAElE,MAAM,WAAW,GAAG,oBAAoB,CAAC,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC;IAC1E,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAEvC,OAAO;QACL,EAAE;QACF,QAAQ,EAAE,QAAQ,IAAI,aAAa,IAAI,EAAE;QACzC,IAAI;QACJ,IAAI;QACJ,YAAY,EAAE,YAAY,CAAC,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS;QACjE,WAAW;QACX,aAAa;QACb,SAAS;QACT,UAAU,EAAE,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC;QAC1C,IAAI,EAAE,oBAAoB,CAAC,GAAG,CAAC,IAAI,CAAC;QACpC,WAAW;QACX,SAAS,EAAE,aAAa,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,WAAW,CAAC;QACpE,YAAY,EAAE,qBAAqB,CAAC,GAAG,CAAC,YAAY,CAAC;QACrD,MAAM;KACP,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,GAAY;IAC/B,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1D,OAAO,EAAE,GAAG,cAAc,EAAE,CAAC;IAC/B,CAAC;IAED,MAAM,KAAK,GAAG,GAA8B,CAAC;IAC7C,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC1B,OAAO;QACL,SAAS,EAAE,qBAAqB,CAAC,KAAK,EAAE,WAAW,EAAE,cAAc,CAAC,SAAS,CAAC;QAC9E,QAAQ,EAAE,qBAAqB,CAAC,KAAK,EAAE,UAAU,EAAE,cAAc,CAAC,QAAQ,CAAC;QAC3E,WAAW,EAAE,qBAAqB,CAAC,KAAK,EAAE,aAAa,EAAE,cAAc,CAAC,WAAW,CAAC;QACpF,aAAa,EAAE,qBAAqB,CAAC,KAAK,EAAE,eAAe,EAAE,cAAc,CAAC,aAAa,CAAC;QAC1F,YAAY,EAAE,qBAAqB,CAAC,KAAK,EAAE,cAAc,EAAE,cAAc,CAAC,YAAY,CAAC;QACvF,gBAAgB,EAAE,qBAAqB,CAAC,KAAK,EAAE,kBAAkB,EAAE,cAAc,CAAC,gBAAgB,CAAC;QACnG,qBAAqB,EAAE,qBAAqB,CAC1C,KAAK,EACL,uBAAuB,EACvB,cAAc,CAAC,qBAAqB,CACrC;QACD,sBAAsB,EAAE,qBAAqB,CAC3C,KAAK,EACL,wBAAwB,EACxB,cAAc,CAAC,sBAAsB,CACtC;QACD,qBAAqB,EAAE,qBAAqB,CAC1C,KAAK,EACL,uBAAuB,EACvB,cAAc,CAAC,qBAAqB,CACrC;QACD,eAAe,EAAE,6BAA6B,CAAC,KAAK,EAAE,cAAc,CAAC,eAAe,CAAC;QACrF,qBAAqB,EAAE,yBAAyB,CAC9C,KAAK,EACL,uBAAuB,EACvB,cAAc,CAAC,qBAAqB,CACrC;QACD,iBAAiB,EAAE,oBAAoB,CAAC,KAAK,EAAE,mBAAmB,EAAE,cAAc,CAAC,iBAAiB,CAAC;QACrG,cAAc,EAAE,oBAAoB,CAAC,KAAK,EAAE,gBAAgB,EAAE,cAAc,CAAC,cAAc,CAAC;KAC7F,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,GAA4B;IACtD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAuB,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,kBAAkB,GAAG,0BAA0B,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAyB;IACrD,IAAI,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC;IAC7E,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,aAAa,CAAC,KAAyB,EAAE,WAAwB;IACxE,IAAI,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC;IAC5E,IAAI,WAAW,KAAK,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1C,IAAI,WAAW,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IAC/C,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,qBAAqB,CAAC,GAAY;IACzC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5E,MAAM,KAAK,GAAG,GAA8B,CAAC;IAC7C,OAAO;QACL,IAAI,EAAE,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC;QACjC,MAAM,EAAE,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC;QACrC,KAAK,EAAE,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC;QACnC,OAAO,EAAE,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC;QACvC,OAAO,EAAE,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC;KACxC,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc;IAC1C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACrC,OAAO,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,cAAc,CAAC,KAAc,EAAE,KAAa;IACnD,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IACrC,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,WAAW,KAAK,EAAE,CAAC,CAAC;IACjD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AAClD,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3E,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,OAAO,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACxD,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa,EAAE,KAAa;IACpD,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,WAAW,KAAK,+BAA+B,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,WAAW,KAAK,+CAA+C,CAAC,CAAC;IACnF,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,KAAa,EAAE,KAAa;IACnD,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,WAAW,KAAK,yCAAyC,CAAC,CAAC;IAC7E,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,GAA4B,EAAE,GAAqB,EAAE,QAAiB;IACnG,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;IACvB,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IACzC,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,GAAG,oBAAoB,CAAC,CAAC;IAC3F,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,oBAAoB,CAAC,GAA4B,EAAE,GAAqB,EAAE,QAAgB;IACjG,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;IACvB,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IACzC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QACvE,MAAM,IAAI,KAAK,CAAC,kBAAkB,GAAG,4BAA4B,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,yBAAyB,CAAC,GAA4B,EAAE,GAAqB,EAAE,QAAkB;IACxG,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;IACvB,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IACzC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,KAAK,CAAC,kBAAkB,GAAG,yBAAyB,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,6BAA6B,CAAC,GAA4B,EAAE,QAAyB;IAC5F,MAAM,KAAK,GAAG,GAAG,CAAC,eAAe,CAAC;IAClC,IAAI,KAAK,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5D,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,UAAU,CAAC,IAAY;IAC9B,IAAI,IAAI,KAAK,GAAG;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,IAAI,CAAC;IAClD,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/E,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/mcpServer.d.ts

@@ -0,0 +1,8 @@
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import type { SshOperations } from "./operations.js";
+import type { Auditor } from "./audit.js";
+type McpServerOptions = {
+    auditor?: Auditor;
+};
+export declare function createMcpServer(operations: SshOperations, options?: McpServerOptions): McpServer;
+export {};