ssh-agent-workspace 1.0.0

package/dist/__tests__/StorageManager.test.js

@@ -0,0 +1,171 @@
+import { describe, it, expect, beforeEach, afterEach } from 'vitest';
+import fs from 'fs';
+import path from 'path';
+import os from 'os';
+import { StorageManager } from '../core/StorageManager.js';
+const TEST_DIR = path.join(os.tmpdir(), 'dynamic-ssh-mcp-test-' + Date.now());
+describe('StorageManager', () => {
+    let storage;
+    beforeEach(() => {
+        storage = new StorageManager(TEST_DIR);
+    });
+    afterEach(() => {
+        storage.shutdown();
+        if (fs.existsSync(TEST_DIR)) {
+            fs.rmSync(TEST_DIR, { recursive: true, force: true });
+        }
+    });
+    it('should create storage directory on first save', () => {
+        expect(fs.existsSync(TEST_DIR)).toBe(false);
+        storage.save({
+            id: 'sess_test123',
+            host: 'prod',
+            tmuxSession: 'mcp_prod_abc',
+            shell: 'bash',
+            connectedAt: Date.now(),
+            lastActivity: Date.now(),
+        });
+        storage.shutdown();
+        expect(fs.existsSync(TEST_DIR)).toBe(true);
+        expect(fs.existsSync(path.join(TEST_DIR, 'sessions.json'))).toBe(true);
+    });
+    it('should save and retrieve sessions', () => {
+        const session = {
+            id: 'sess_test456',
+            host: 'staging',
+            tmuxSession: 'mcp_staging_xyz',
+            shell: 'zsh',
+            connectedAt: 1000,
+            lastActivity: 2000,
+        };
+        storage.save(session);
+        storage.shutdown();
+        // Create a new StorageManager to test persistence
+        const storage2 = new StorageManager(TEST_DIR);
+        const retrieved = storage2.get('sess_test456');
+        expect(retrieved).toBeDefined();
+        expect(retrieved.host).toBe('staging');
+        expect(retrieved.tmuxSession).toBe('mcp_staging_xyz');
+        expect(retrieved.shell).toBe('zsh');
+        expect(retrieved.connectedAt).toBe(1000);
+        storage2.shutdown();
+    });
+    it('should list all sessions', () => {
+        storage.save({
+            id: 'sess_1',
+            host: 'prod',
+            tmuxSession: 'mcp_prod_1',
+            connectedAt: 1,
+            lastActivity: 1,
+        });
+        storage.save({
+            id: 'sess_2',
+            host: 'gpu',
+            tmuxSession: 'mcp_gpu_2',
+            connectedAt: 2,
+            lastActivity: 2,
+        });
+        const list = storage.list();
+        expect(list).toHaveLength(2);
+    });
+    it('should list sessions by host', () => {
+        storage.save({
+            id: 'sess_a',
+            host: 'prod',
+            tmuxSession: 'mcp_prod_a',
+            connectedAt: 1,
+            lastActivity: 1,
+        });
+        storage.save({
+            id: 'sess_b',
+            host: 'staging',
+            tmuxSession: 'mcp_staging_b',
+            connectedAt: 2,
+            lastActivity: 2,
+        });
+        storage.save({
+            id: 'sess_c',
+            host: 'prod',
+            tmuxSession: 'mcp_prod_c',
+            connectedAt: 3,
+            lastActivity: 3,
+        });
+        const prodSessions = storage.listByHost('prod');
+        expect(prodSessions).toHaveLength(2);
+        expect(prodSessions.map((s) => s.id)).toContain('sess_a');
+        expect(prodSessions.map((s) => s.id)).toContain('sess_c');
+    });
+    it('should list tmux session names', () => {
+        storage.save({
+            id: 'sess_x',
+            host: 'prod',
+            tmuxSession: 'mcp_prod_x',
+            connectedAt: 1,
+            lastActivity: 1,
+        });
+        storage.save({
+            id: 'sess_y',
+            host: 'gpu',
+            tmuxSession: 'mcp_gpu_y',
+            connectedAt: 2,
+            lastActivity: 2,
+        });
+        const names = storage.listTmuxSessions();
+        expect(names).toContain('mcp_prod_x');
+        expect(names).toContain('mcp_gpu_y');
+    });
+    it('should remove sessions', () => {
+        storage.save({
+            id: 'sess_rm',
+            host: 'prod',
+            tmuxSession: 'mcp_prod_rm',
+            connectedAt: 1,
+            lastActivity: 1,
+        });
+        expect(storage.get('sess_rm')).toBeDefined();
+        storage.remove('sess_rm');
+        expect(storage.get('sess_rm')).toBeUndefined();
+        storage.shutdown();
+        // Verify removal persisted
+        const storage2 = new StorageManager(TEST_DIR);
+        expect(storage2.get('sess_rm')).toBeUndefined();
+        storage2.shutdown();
+    });
+    it('should update existing session on save', () => {
+        storage.save({
+            id: 'sess_upd',
+            host: 'prod',
+            tmuxSession: 'mcp_prod_upd',
+            connectedAt: 1,
+            lastActivity: 1,
+        });
+        storage.save({
+            id: 'sess_upd',
+            host: 'prod',
+            tmuxSession: 'mcp_prod_upd',
+            shell: 'zsh',
+            connectedAt: 1,
+            lastActivity: 9999,
+        });
+        const updated = storage.get('sess_upd');
+        expect(updated.shell).toBe('zsh');
+        expect(updated.lastActivity).toBe(9999);
+        expect(storage.list()).toHaveLength(1);
+    });
+    it('should handle empty storage gracefully', () => {
+        const list = storage.list();
+        expect(list).toEqual([]);
+        expect(storage.get('nonexistent')).toBeUndefined();
+        expect(storage.listByHost('nonexistent')).toEqual([]);
+        expect(storage.listTmuxSessions()).toEqual([]);
+    });
+    it('should handle corrupted storage file gracefully', () => {
+        const dir = path.join(TEST_DIR);
+        fs.mkdirSync(dir, { recursive: true });
+        fs.writeFileSync(path.join(dir, 'sessions.json'), 'invalid json{{{');
+        const storage2 = new StorageManager(TEST_DIR);
+        expect(storage2.list()).toEqual([]);
+        storage2.shutdown();
+    });
+});
+//# sourceMappingURL=StorageManager.test.js.map

package/dist/__tests__/StorageManager.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"StorageManager.test.js","sourceRoot":"","sources":["../../src/__tests__/StorageManager.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAE3D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,uBAAuB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;AAE9E,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,IAAI,OAAuB,CAAC;IAE5B,UAAU,CAAC,GAAG,EAAE;QACd,OAAO,GAAG,IAAI,cAAc,CAAC,QAAQ,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,OAAO,CAAC,QAAQ,EAAE,CAAC;QACnB,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5B,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5C,OAAO,CAAC,IAAI,CAAC;YACX,EAAE,EAAE,cAAc;YAClB,IAAI,EAAE,MAAM;YACZ,WAAW,EAAE,cAAc;YAC3B,KAAK,EAAE,MAAM;YACb,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE;YACvB,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE;SACzB,CAAC,CAAC;QACH,OAAO,CAAC,QAAQ,EAAE,CAAC;QACnB,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3C,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,OAAO,GAAG;YACd,EAAE,EAAE,cAAc;YAClB,IAAI,EAAE,SAAS;YACf,WAAW,EAAE,iBAAiB;YAC9B,KAAK,EAAE,KAAK;YACZ,WAAW,EAAE,IAAI;YACjB,YAAY,EAAE,IAAI;SACnB,CAAC;QAEF,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtB,OAAO,CAAC,QAAQ,EAAE,CAAC;QAEnB,kDAAkD;QAClD,MAAM,QAAQ,GAAG,IAAI,cAAc,CAAC,QAAQ,CAAC,CAAC;QAC9C,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAC/C,MAAM,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC;QAChC,MAAM,CAAC,SAAU,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxC,MAAM,CAAC,SAAU,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACvD,MAAM,CAAC,SAAU,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrC,MAAM,CAAC,SAAU,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1C,QAAQ,CAAC,QAAQ,EAAE,CAAC;IACtB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;QAClC,OAAO,CAAC,IAAI,CAAC;YACX,EAAE,EAAE,QAAQ;YACZ,IAAI,EAAE,MAAM;YACZ,WAAW,EAAE,YAAY;YACzB,WAAW,EAAE,CAAC;YACd,YAAY,EAAE,CAAC;SAChB,CAAC,CAAC;QACH,OAAO,CAAC,IAAI,CAAC;YACX,EAAE,EAAE,QAAQ;YACZ,IAAI,EAAE,KAAK;YACX,WAAW,EAAE,WAAW;YACxB,WAAW,EAAE,CAAC;YACd,YAAY,EAAE,CAAC;SAChB,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAC5B,MAAM,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,OAAO,CAAC,IAAI,CAAC;YACX,EAAE,EAAE,QAAQ;YACZ,IAAI,EAAE,MAAM;YACZ,WAAW,EAAE,YAAY;YACzB,WAAW,EAAE,CAAC;YACd,YAAY,EAAE,CAAC;SAChB,CAAC,CAAC;QACH,OAAO,CAAC,IAAI,CAAC;YACX,EAAE,EAAE,QAAQ;YACZ,IAAI,EAAE,SAAS;YACf,WAAW,EAAE,eAAe;YAC5B,WAAW,EAAE,CAAC;YACd,YAAY,EAAE,CAAC;SAChB,CAAC,CAAC;QACH,OAAO,CAAC,IAAI,CAAC;YACX,EAAE,EAAE,QAAQ;YACZ,IAAI,EAAE,MAAM;YACZ,WAAW,EAAE,YAAY;YACzB,WAAW,EAAE,CAAC;YACd,YAAY,EAAE,CAAC;SAChB,CAAC,CAAC;QAEH,MAAM,YAAY,GAAG,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAChD,MAAM,CAAC,YAAY,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACrC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC1D,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,OAAO,CAAC,IAAI,CAAC;YACX,EAAE,EAAE,QAAQ;YACZ,IAAI,EAAE,MAAM;YACZ,WAAW,EAAE,YAAY;YACzB,WAAW,EAAE,CAAC;YACd,YAAY,EAAE,CAAC;SAChB,CAAC,CAAC;QACH,OAAO,CAAC,IAAI,CAAC;YACX,EAAE,EAAE,QAAQ;YACZ,IAAI,EAAE,KAAK;YACX,WAAW,EAAE,WAAW;YACxB,WAAW,EAAE,CAAC;YACd,YAAY,EAAE,CAAC;SAChB,CAAC,CAAC;QAEH,MAAM,KAAK,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;QACzC,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QACtC,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wBAAwB,EAAE,GAAG,EAAE;QAChC,OAAO,CAAC,IAAI,CAAC;YACX,EAAE,EAAE,SAAS;YACb,IAAI,EAAE,MAAM;YACZ,WAAW,EAAE,aAAa;YAC1B,WAAW,EAAE,CAAC;YACd,YAAY,EAAE,CAAC;SAChB,CAAC,CAAC;QACH,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QAE7C,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC1B,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QAE/C,OAAO,CAAC,QAAQ,EAAE,CAAC;QAEnB,2BAA2B;QAC3B,MAAM,QAAQ,GAAG,IAAI,cAAc,CAAC,QAAQ,CAAC,CAAC;QAC9C,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QAChD,QAAQ,CAAC,QAAQ,EAAE,CAAC;IACtB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,OAAO,CAAC,IAAI,CAAC;YACX,EAAE,EAAE,UAAU;YACd,IAAI,EAAE,MAAM;YACZ,WAAW,EAAE,cAAc;YAC3B,WAAW,EAAE,CAAC;YACd,YAAY,EAAE,CAAC;SAChB,CAAC,CAAC;QAEH,OAAO,CAAC,IAAI,CAAC;YACX,EAAE,EAAE,UAAU;YACd,IAAI,EAAE,MAAM;YACZ,WAAW,EAAE,cAAc;YAC3B,KAAK,EAAE,KAAK;YACZ,WAAW,EAAE,CAAC;YACd,YAAY,EAAE,IAAI;SACnB,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACxC,MAAM,CAAC,OAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,CAAC,OAAQ,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAC5B,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACzB,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QACnD,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACtD,MAAM,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAChC,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,EAAE,iBAAiB,CAAC,CAAC;QAErE,MAAM,QAAQ,GAAG,IAAI,cAAc,CAAC,QAAQ,CAAC,CAAC;QAC9C,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACpC,QAAQ,CAAC,QAAQ,EAAE,CAAC;IACtB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/ansi.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=ansi.test.d.ts.map

package/dist/__tests__/ansi.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ansi.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/ansi.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/ansi.test.js

@@ -0,0 +1,41 @@
+import { describe, it, expect } from 'vitest';
+import { stripAnsi } from '../utils/ansi.js';
+describe('ansi', () => {
+    describe('stripAnsi', () => {
+        it('should return plain text unchanged', () => {
+            expect(stripAnsi('hello world')).toBe('hello world');
+            expect(stripAnsi('no colors here')).toBe('no colors here');
+        });
+        it('should strip color codes', () => {
+            expect(stripAnsi('\u001B[31mred\u001B[0m')).toBe('red');
+            expect(stripAnsi('\u001B[32mgreen\u001B[0m')).toBe('green');
+            expect(stripAnsi('\u001B[1;31mbold red\u001B[0m')).toBe('bold red');
+        });
+        it('should strip cursor control sequences', () => {
+            expect(stripAnsi('\u001B[1Aup\u001B[1Bdown')).toBe('updown');
+            expect(stripAnsi('\u001B[2Jcleared')).toBe('cleared');
+        });
+        it('should strip complex multi-code sequences', () => {
+            const input = '\u001B[1m\u001B[33m\u001B[44mstyled\u001B[0m text';
+            expect(stripAnsi(input)).toBe('styled text');
+        });
+        it('should handle empty string', () => {
+            expect(stripAnsi('')).toBe('');
+        });
+        it('should handle string with only ANSI codes', () => {
+            expect(stripAnsi('\u001B[31m\u001B[0m')).toBe('');
+        });
+        it('should strip more escape patterns with updated regex', () => {
+            // New comprehensive regex strips ESC followed by valid CSI terminator chars
+            // 't' falls in the R-T range used as CSI terminators
+            const input = 'text \u001B[31mred\u001B[0m normal';
+            expect(stripAnsi(input)).toBe('text red normal');
+        });
+        it('should strip prompt-style ANSI sequences', () => {
+            // Typical colored prompt
+            const input = '\u001B[01;32muser@host\u001B[00m:\u001B[01;34m~$\u001B[00m ';
+            expect(stripAnsi(input)).toBe('user@host:~$ ');
+        });
+    });
+});
+//# sourceMappingURL=ansi.test.js.map

package/dist/__tests__/ansi.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ansi.test.js","sourceRoot":"","sources":["../../src/__tests__/ansi.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAE7C,QAAQ,CAAC,MAAM,EAAE,GAAG,EAAE;IACpB,QAAQ,CAAC,WAAW,EAAE,GAAG,EAAE;QACzB,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;YAC5C,MAAM,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YACrD,MAAM,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC7D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;YAClC,MAAM,CAAC,SAAS,CAAC,wBAAwB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACxD,MAAM,CAAC,SAAS,CAAC,0BAA0B,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC5D,MAAM,CAAC,SAAS,CAAC,+BAA+B,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACtE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;YAC/C,MAAM,CAAC,SAAS,CAAC,0BAA0B,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC7D,MAAM,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;YACnD,MAAM,KAAK,GAAG,mDAAmD,CAAC;YAClE,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;YACpC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;YACnD,MAAM,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACpD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;YAC9D,4EAA4E;YAC5E,qDAAqD;YACrD,MAAM,KAAK,GAAG,oCAAoC,CAAC;YACnD,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACnD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;YAClD,yBAAyB;YACzB,MAAM,KAAK,GAAG,6DAA6D,CAAC;YAC5E,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACjD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/security.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=security.test.d.ts.map

package/dist/__tests__/security.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/security.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/security.test.js

@@ -0,0 +1,87 @@
+import { describe, it, expect, beforeEach, afterEach } from 'vitest';
+import { isReadOnlyMode, isHostAllowed, isCommandDenied } from '../utils/security.js';
+describe('security', () => {
+    const OLD_ENV = { ...process.env };
+    beforeEach(() => {
+        process.env = { ...OLD_ENV };
+    });
+    afterEach(() => {
+        process.env = OLD_ENV;
+    });
+    describe('isReadOnlyMode', () => {
+        it('should return false by default', () => {
+            delete process.env.MCP_SSH_READONLY;
+            expect(isReadOnlyMode()).toBe(false);
+        });
+        it('should return true when MCP_SSH_READONLY=true', () => {
+            process.env.MCP_SSH_READONLY = 'true';
+            expect(isReadOnlyMode()).toBe(true);
+        });
+        it('should return false for any other value', () => {
+            process.env.MCP_SSH_READONLY = 'false';
+            expect(isReadOnlyMode()).toBe(false);
+            process.env.MCP_SSH_READONLY = '1';
+            expect(isReadOnlyMode()).toBe(false);
+        });
+    });
+    describe('isHostAllowed', () => {
+        it('should allow all hosts when no filter set', () => {
+            delete process.env.MCP_SSH_ALLOWED_HOSTS;
+            expect(isHostAllowed('prod')).toBe(true);
+            expect(isHostAllowed('any-host')).toBe(true);
+        });
+        it('should allow only listed hosts', () => {
+            process.env.MCP_SSH_ALLOWED_HOSTS = 'prod,staging';
+            expect(isHostAllowed('prod')).toBe(true);
+            expect(isHostAllowed('staging')).toBe(true);
+            expect(isHostAllowed('gpu')).toBe(false);
+        });
+        it('should trim whitespace from host entries', () => {
+            process.env.MCP_SSH_ALLOWED_HOSTS = ' prod , staging ';
+            expect(isHostAllowed('prod')).toBe(true);
+            expect(isHostAllowed('staging')).toBe(true);
+        });
+        it('should handle empty list as allow all', () => {
+            process.env.MCP_SSH_ALLOWED_HOSTS = '';
+            expect(isHostAllowed('prod')).toBe(true);
+        });
+        it('should handle comma-only list', () => {
+            process.env.MCP_SSH_ALLOWED_HOSTS = ',';
+            expect(isHostAllowed('prod')).toBe(true);
+        });
+    });
+    describe('isCommandDenied', () => {
+        it('should allow all commands when no denylist', () => {
+            delete process.env.MCP_SSH_DENYLIST_COMMANDS;
+            expect(isCommandDenied('rm -rf /')).toBe(false);
+            expect(isCommandDenied('ls -la')).toBe(false);
+        });
+        it('should block denied command patterns', () => {
+            process.env.MCP_SSH_DENYLIST_COMMANDS = 'rm -rf,shutdown,halt';
+            expect(isCommandDenied('rm -rf /')).toBe(true);
+            expect(isCommandDenied('shutdown now')).toBe(true);
+            expect(isCommandDenied('sudo halt')).toBe(true);
+        });
+        it('should be case-insensitive', () => {
+            process.env.MCP_SSH_DENYLIST_COMMANDS = 'RM -RF,ShutDown';
+            expect(isCommandDenied('rm -rf /')).toBe(true);
+            expect(isCommandDenied('SHUTDOWN now')).toBe(true);
+        });
+        it('should allow safe commands', () => {
+            process.env.MCP_SSH_DENYLIST_COMMANDS = 'rm -rf,shutdown';
+            expect(isCommandDenied('ls -la')).toBe(false);
+            expect(isCommandDenied('echo hello')).toBe(false);
+            expect(isCommandDenied('npm run build')).toBe(false);
+        });
+        it('should handle empty denylist', () => {
+            process.env.MCP_SSH_DENYLIST_COMMANDS = '';
+            expect(isCommandDenied('rm -rf /')).toBe(false);
+        });
+        it('should trim whitespace from entries', () => {
+            process.env.MCP_SSH_DENYLIST_COMMANDS = ' rm -rf , shutdown ';
+            expect(isCommandDenied('rm -rf /')).toBe(true);
+            expect(isCommandDenied('shutdown -h now')).toBe(true);
+        });
+    });
+});
+//# sourceMappingURL=security.test.js.map

package/dist/__tests__/security.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.test.js","sourceRoot":"","sources":["../../src/__tests__/security.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAEtF,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE;IACxB,MAAM,OAAO,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAEnC,UAAU,CAAC,GAAG,EAAE;QACd,OAAO,CAAC,GAAG,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,OAAO,CAAC,GAAG,GAAG,OAAO,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;QAC9B,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;YACxC,OAAO,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;YACpC,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;YACvD,OAAO,CAAC,GAAG,CAAC,gBAAgB,GAAG,MAAM,CAAC;YACtC,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;YACjD,OAAO,CAAC,GAAG,CAAC,gBAAgB,GAAG,OAAO,CAAC;YACvC,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAErC,OAAO,CAAC,GAAG,CAAC,gBAAgB,GAAG,GAAG,CAAC;YACnC,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;QAC7B,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;YACnD,OAAO,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;YACzC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;YACxC,OAAO,CAAC,GAAG,CAAC,qBAAqB,GAAG,cAAc,CAAC;YACnD,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC5C,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;YAClD,OAAO,CAAC,GAAG,CAAC,qBAAqB,GAAG,kBAAkB,CAAC;YACvD,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;YAC/C,OAAO,CAAC,GAAG,CAAC,qBAAqB,GAAG,EAAE,CAAC;YACvC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;YACvC,OAAO,CAAC,GAAG,CAAC,qBAAqB,GAAG,GAAG,CAAC;YACxC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;QAC/B,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;YACpD,OAAO,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC;YAC7C,MAAM,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAChD,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;YAC9C,OAAO,CAAC,GAAG,CAAC,yBAAyB,GAAG,sBAAsB,CAAC;YAC/D,MAAM,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC/C,MAAM,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnD,MAAM,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;YACpC,OAAO,CAAC,GAAG,CAAC,yBAAyB,GAAG,iBAAiB,CAAC;YAC1D,MAAM,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC/C,MAAM,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;YACpC,OAAO,CAAC,GAAG,CAAC,yBAAyB,GAAG,iBAAiB,CAAC;YAC1D,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC9C,MAAM,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAClD,MAAM,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;YACtC,OAAO,CAAC,GAAG,CAAC,yBAAyB,GAAG,EAAE,CAAC;YAC3C,MAAM,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;YAC7C,OAAO,CAAC,GAAG,CAAC,yBAAyB,GAAG,qBAAqB,CAAC;YAC9D,MAAM,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC/C,MAAM,CAAC,eAAe,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/validation.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=validation.test.d.ts.map

package/dist/__tests__/validation.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/validation.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/validation.test.js

@@ -0,0 +1,23 @@
+import { describe, it, expect } from 'vitest';
+import { sanitizeTmuxSessionName } from '../utils/validation.js';
+describe('validation', () => {
+    describe('sanitizeTmuxSessionName', () => {
+        it('should preserve valid names unchanged', () => {
+            expect(sanitizeTmuxSessionName('prod')).toBe('prod');
+            expect(sanitizeTmuxSessionName('my_host')).toBe('my_host');
+            expect(sanitizeTmuxSessionName('server-01')).toBe('server-01');
+            expect(sanitizeTmuxSessionName('test.example')).toBe('test.example');
+        });
+        it('should replace invalid characters with underscore', () => {
+            expect(sanitizeTmuxSessionName('hello world')).toBe('hello_world');
+            expect(sanitizeTmuxSessionName('host@domain')).toBe('host_domain');
+            expect(sanitizeTmuxSessionName('path/name')).toBe('path_name');
+        });
+        it('should prefix non-alpha starters', () => {
+            expect(sanitizeTmuxSessionName('123abc')).toBe('mcp_123abc');
+            expect(sanitizeTmuxSessionName('-test')).toBe('mcp_-test');
+            expect(sanitizeTmuxSessionName('.hidden')).toBe('mcp_.hidden');
+        });
+    });
+});
+//# sourceMappingURL=validation.test.js.map

package/dist/__tests__/validation.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.test.js","sourceRoot":"","sources":["../../src/__tests__/validation.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AAEjE,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE;IAC1B,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;QACvC,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;YAC/C,MAAM,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACrD,MAAM,CAAC,uBAAuB,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC3D,MAAM,CAAC,uBAAuB,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAC/D,MAAM,CAAC,uBAAuB,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACvE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;YAC3D,MAAM,CAAC,uBAAuB,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YACnE,MAAM,CAAC,uBAAuB,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YACnE,MAAM,CAAC,uBAAuB,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACjE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;YAC1C,MAAM,CAAC,uBAAuB,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAC7D,MAAM,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAC3D,MAAM,CAAC,uBAAuB,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACjE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/core/HostSecurityManager.d.ts

@@ -0,0 +1,25 @@
+export interface HostSecurityEntry {
+    readonly?: boolean;
+    allow_commands?: string[];
+    deny_commands?: string[];
+}
+export interface HostSecurityConfig {
+    [host: string]: HostSecurityEntry;
+}
+export declare class HostSecurityManager {
+    private config;
+    private configPath;
+    constructor(configDir?: string);
+    private load;
+    private save;
+    isReadOnly(host?: string): boolean;
+    setReadOnly(host: string, readonly: boolean): void;
+    getAllowCommands(host: string): string[];
+    setAllowCommands(host: string, commands: string[]): void;
+    getDenyCommands(host: string): string[];
+    setDenyCommands(host: string, commands: string[]): void;
+    getHostConfig(host: string): HostSecurityEntry | null;
+    getAll(): HostSecurityConfig;
+    removeHost(host: string): void;
+}
+//# sourceMappingURL=HostSecurityManager.d.ts.map

package/dist/core/HostSecurityManager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"HostSecurityManager.d.ts","sourceRoot":"","sources":["../../src/core/HostSecurityManager.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,kBAAkB;IACjC,CAAC,IAAI,EAAE,MAAM,GAAG,iBAAiB,CAAC;CACnC;AAKD,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,MAAM,CAAqB;IACnC,OAAO,CAAC,UAAU,CAAS;gBAEf,SAAS,CAAC,EAAE,MAAM;IAK9B,OAAO,CAAC,IAAI;IAWZ,OAAO,CAAC,IAAI;IAUZ,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO;IAKlC,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,GAAG,IAAI;IAMlD,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE;IAIxC,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAI;IAMxD,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE;IAIvC,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAI;IAMvD,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,iBAAiB,GAAG,IAAI;IAIrD,MAAM,IAAI,kBAAkB;IAI5B,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;CAI/B"}

package/dist/core/HostSecurityManager.js

@@ -0,0 +1,76 @@
+import { logger } from '../utils/logger.js';
+import * as fs from 'fs';
+import * as path from 'path';
+import * as os from 'os';
+const DEFAULT_DIR = path.join(os.homedir(), '.dynamic-ssh-mcp');
+const CONFIG_FILE = 'host_security.json';
+export class HostSecurityManager {
+    config;
+    configPath;
+    constructor(configDir) {
+        this.configPath = path.join(configDir || DEFAULT_DIR, CONFIG_FILE);
+        this.config = this.load();
+    }
+    load() {
+        try {
+            if (fs.existsSync(this.configPath)) {
+                return JSON.parse(fs.readFileSync(this.configPath, 'utf-8'));
+            }
+        }
+        catch (err) {
+            logger.warn({ err }, 'Failed to load host security config');
+        }
+        return {};
+    }
+    save() {
+        try {
+            const dir = path.dirname(this.configPath);
+            if (!fs.existsSync(dir))
+                fs.mkdirSync(dir, { recursive: true });
+            fs.writeFileSync(this.configPath, JSON.stringify(this.config, null, 2));
+        }
+        catch (err) {
+            logger.error({ err }, 'Failed to save host security config');
+        }
+    }
+    isReadOnly(host) {
+        if (!host || !this.config[host])
+            return false;
+        return this.config[host].readonly === true;
+    }
+    setReadOnly(host, readonly) {
+        if (!this.config[host])
+            this.config[host] = {};
+        this.config[host].readonly = readonly;
+        this.save();
+    }
+    getAllowCommands(host) {
+        return this.config[host]?.allow_commands || [];
+    }
+    setAllowCommands(host, commands) {
+        if (!this.config[host])
+            this.config[host] = {};
+        this.config[host].allow_commands = commands;
+        this.save();
+    }
+    getDenyCommands(host) {
+        return this.config[host]?.deny_commands || [];
+    }
+    setDenyCommands(host, commands) {
+        if (!this.config[host])
+            this.config[host] = {};
+        this.config[host].deny_commands = commands;
+        this.save();
+    }
+    getHostConfig(host) {
+        return this.config[host] || null;
+    }
+    getAll() {
+        return { ...this.config };
+    }
+    removeHost(host) {
+        delete this.config[host];
+        this.save();
+    }
+}
+//# sourceMappingURL=HostSecurityManager.js.map

package/dist/core/HostSecurityManager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"HostSecurityManager.js","sourceRoot":"","sources":["../../src/core/HostSecurityManager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AAYzB,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,kBAAkB,CAAC,CAAC;AAChE,MAAM,WAAW,GAAG,oBAAoB,CAAC;AAEzC,MAAM,OAAO,mBAAmB;IACtB,MAAM,CAAqB;IAC3B,UAAU,CAAS;IAE3B,YAAY,SAAkB;QAC5B,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,WAAW,EAAE,WAAW,CAAC,CAAC;QACnE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,CAAC;IAEO,IAAI;QACV,IAAI,CAAC;YACH,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;gBACnC,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,qCAAqC,CAAC,CAAC;QAC9D,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IAEO,IAAI;QACV,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC1C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAChE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC1E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,qCAAqC,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IAED,UAAU,CAAC,IAAa;QACtB,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QAC9C,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC;IAC7C,CAAC;IAED,WAAW,CAAC,IAAY,EAAE,QAAiB;QACzC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;YAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QAC/C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACtC,IAAI,CAAC,IAAI,EAAE,CAAC;IACd,CAAC;IAED,gBAAgB,CAAC,IAAY;QAC3B,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,cAAc,IAAI,EAAE,CAAC;IACjD,CAAC;IAED,gBAAgB,CAAC,IAAY,EAAE,QAAkB;QAC/C,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;YAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QAC/C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,cAAc,GAAG,QAAQ,CAAC;QAC5C,IAAI,CAAC,IAAI,EAAE,CAAC;IACd,CAAC;IAED,eAAe,CAAC,IAAY;QAC1B,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,aAAa,IAAI,EAAE,CAAC;IAChD,CAAC;IAED,eAAe,CAAC,IAAY,EAAE,QAAkB;QAC9C,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;YAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QAC/C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,aAAa,GAAG,QAAQ,CAAC;QAC3C,IAAI,CAAC,IAAI,EAAE,CAAC;IACd,CAAC;IAED,aAAa,CAAC,IAAY;QACxB,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;IACnC,CAAC;IAED,MAAM;QACJ,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;IAC5B,CAAC;IAED,UAAU,CAAC,IAAY;QACrB,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACzB,IAAI,CAAC,IAAI,EAAE,CAAC;IACd,CAAC;CACF"}

package/dist/core/SSHManager.d.ts

@@ -0,0 +1,48 @@
+import { Client, type ConnectConfig } from 'ssh2';
+export interface SFTPEntry {
+    filename: string;
+    longname: string;
+    attrs: {
+        mode: number;
+        uid: number;
+        gid: number;
+        size: number;
+        atime: number;
+        mtime: number;
+        isDirectory: boolean;
+        isFile: boolean;
+        isSymbolicLink: boolean;
+    };
+}
+export interface SFTPStat {
+    mode: number;
+    uid: number;
+    gid: number;
+    size: number;
+    atime: number;
+    mtime: number;
+    isDirectory: boolean;
+    isFile: boolean;
+    isSymbolicLink: boolean;
+}
+export declare class SSHManager {
+    connect(config: ConnectConfig): Promise<Client>;
+    private getSftp;
+    sftpUpload(ssh: Client, localPath: string, remotePath: string, timeoutMs?: number): Promise<void>;
+    sftpDownload(ssh: Client, remotePath: string, localPath: string, timeoutMs?: number): Promise<void>;
+    sftpList(ssh: Client, remotePath: string, timeoutMs?: number): Promise<SFTPEntry[]>;
+    sftpStat(ssh: Client, remotePath: string, timeoutMs?: number): Promise<SFTPStat>;
+    sftpExists(ssh: Client, remotePath: string, timeoutMs?: number): Promise<boolean>;
+    sftpMkdir(ssh: Client, remotePath: string, timeoutMs?: number): Promise<void>;
+    sftpUnlink(ssh: Client, remotePath: string, timeoutMs?: number): Promise<void>;
+    isAlive(ssh: Client): boolean;
+    exec(ssh: Client, command: string, timeoutMs?: number): Promise<{
+        stdout: string;
+        stderr: string;
+        code: number | null;
+        signal: string | null;
+    }>;
+    connectWithProxy(proxyConfig: ConnectConfig, targetConfig: ConnectConfig): Promise<Client>;
+    disconnect(ssh: Client): void;
+}
+//# sourceMappingURL=SSHManager.d.ts.map

package/dist/core/SSHManager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SSHManager.d.ts","sourceRoot":"","sources":["../../src/core/SSHManager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,KAAK,aAAa,EAAe,MAAM,MAAM,CAAC;AAK/D,MAAM,WAAW,SAAS;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE;QACL,IAAI,EAAE,MAAM,CAAC;QACb,GAAG,EAAE,MAAM,CAAC;QACZ,GAAG,EAAE,MAAM,CAAC;QACZ,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;QACd,WAAW,EAAE,OAAO,CAAC;QACrB,MAAM,EAAE,OAAO,CAAC;QAChB,cAAc,EAAE,OAAO,CAAC;KACzB,CAAC;CACH;AAED,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,OAAO,CAAC;IACrB,MAAM,EAAE,OAAO,CAAC;IAChB,cAAc,EAAE,OAAO,CAAC;CACzB;AAED,qBAAa,UAAU;IACf,OAAO,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC;IAmCrD,OAAO,CAAC,OAAO;IAcT,UAAU,CACd,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,SAAS,SAAS,GACjB,OAAO,CAAC,IAAI,CAAC;IAqBV,YAAY,CAChB,GAAG,EAAE,MAAM,EACX,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,EACjB,SAAS,SAAS,GACjB,OAAO,CAAC,IAAI,CAAC;IAqBV,QAAQ,CACZ,GAAG,EAAE,MAAM,EACX,UAAU,EAAE,MAAM,EAClB,SAAS,SAAQ,GAChB,OAAO,CAAC,SAAS,EAAE,CAAC;IA0CjB,QAAQ,CACZ,GAAG,EAAE,MAAM,EACX,UAAU,EAAE,MAAM,EAClB,SAAS,SAAQ,GAChB,OAAO,CAAC,QAAQ,CAAC;IA8Bd,UAAU,CACd,GAAG,EAAE,MAAM,EACX,UAAU,EAAE,MAAM,EAClB,SAAS,SAAQ,GAChB,OAAO,CAAC,OAAO,CAAC;IASb,SAAS,CACb,GAAG,EAAE,MAAM,EACX,UAAU,EAAE,MAAM,EAClB,SAAS,SAAQ,GAChB,OAAO,CAAC,IAAI,CAAC;IAqBV,UAAU,CACd,GAAG,EAAE,MAAM,EACX,UAAU,EAAE,MAAM,EAClB,SAAS,SAAQ,GAChB,OAAO,CAAC,IAAI,CAAC;IAqBhB,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAQvB,IAAI,CACR,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,SAAS,SAAQ,GAChB,OAAO,CAAC;QACT,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;QACpB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;KACvB,CAAC;IAoCI,gBAAgB,CACpB,WAAW,EAAE,aAAa,EAC1B,YAAY,EAAE,aAAa,GAC1B,OAAO,CAAC,MAAM,CAAC;IAgDlB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;CAU9B"}