ssh-mcp-devops 2.0.0

package/index-v2.js

@@ -0,0 +1,427 @@
+#!/usr/bin/env node
+import { Server } from '@modelcontextprotocol/sdk/server/index.js';
+import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
+import {
+  CallToolRequestSchema,
+  ListToolsRequestSchema,
+} from '@modelcontextprotocol/sdk/types.js';
+import { SSHManager } from './ssh-manager-v2.js';
+import { DockerManager } from './docker-manager.js';
+import { SystemMonitor } from './system-monitor.js';
+import { AuditLogger } from './audit-logger.js';
+import { SecurityChecker } from './security-checker.js';
+
+const server = new Server(
+  {
+    name: 'ssh-mcp-server',
+    version: '2.0.0',
+  },
+  {
+    capabilities: {
+      tools: {},
+    },
+  }
+);
+
+const sshManager = new SSHManager();
+const dockerManager = new DockerManager(sshManager);
+const systemMonitor = new SystemMonitor(sshManager);
+const auditLogger = new AuditLogger();
+const securityChecker = new SecurityChecker();
+
+// 从环境变量读取SSH配置并自动连接
+const sshConfig = {
+  host: process.env.SSH_HOST,
+  port: parseInt(process.env.SSH_PORT || '22'),
+  username: process.env.SSH_USERNAME,
+  password: process.env.SSH_PASSWORD,
+  privateKeyPath: process.env.SSH_PRIVATE_KEY_PATH,
+};
+
+// 如果配置了SSH信息，启动时自动连接
+if (sshConfig.host && sshConfig.username) {
+  sshManager.autoConnect(sshConfig).catch(err => {
+    console.error('自动连接失败:', err.message);
+  });
+}
+
+// 工具列表
+server.setRequestHandler(ListToolsRequestSchema, async () => {
+  return {
+    tools: [
+      // SSH 基础工具
+      {
+        name: 'ssh_connect',
+        description: '连接到远程SSH服务器',
+        inputSchema: {
+          type: 'object',
+          properties: {
+            host: { type: 'string', description: 'SSH服务器地址' },
+            port: { type: 'number', description: 'SSH端口', default: 22 },
+            username: { type: 'string', description: '用户名' },
+            password: { type: 'string', description: '密码（可选）' },
+            privateKeyPath: { type: 'string', description: '私钥路径（可选）' },
+          },
+          required: ['host', 'username'],
+        },
+      },
+      {
+        name: 'ssh_exec',
+        description: '在远程服务器执行命令（危险命令需要确认）',
+        inputSchema: {
+          type: 'object',
+          properties: {
+            command: { type: 'string', description: '要执行的命令' },
+            confirm: { type: 'boolean', description: '确认执行危险操作', default: false },
+            timeout: { type: 'number', description: '超时时间（毫秒）', default: 300000 },
+          },
+          required: ['command'],
+        },
+      },
+      {
+        name: 'ssh_upload',
+        description: '上传文件到远程服务器',
+        inputSchema: {
+          type: 'object',
+          properties: {
+            localPath: { type: 'string', description: '本地文件路径' },
+            remotePath: { type: 'string', description: '远程目标路径' },
+          },
+          required: ['localPath', 'remotePath'],
+        },
+      },
+      {
+        name: 'ssh_download',
+        description: '从远程服务器下载文件',
+        inputSchema: {
+          type: 'object',
+          properties: {
+            remotePath: { type: 'string', description: '远程文件路径' },
+            localPath: { type: 'string', description: '本地保存路径' },
+          },
+          required: ['remotePath', 'localPath'],
+        },
+      },
+      {
+        name: 'ssh_deploy',
+        description: '自动部署项目（上传代码、安装依赖、重启服务）',
+        inputSchema: {
+          type: 'object',
+          properties: {
+            projectPath: { type: 'string', description: '本地项目路径' },
+            remotePath: { type: 'string', description: '远程部署路径' },
+            deployScript: { type: 'string', description: '部署脚本命令', default: 'npm install && npm run build && pm2 restart app' },
+          },
+          required: ['projectPath', 'remotePath'],
+        },
+      },
+
+      // Docker 管理工具
+      {
+        name: 'docker_list_containers',
+        description: '列出所有Docker容器',
+        inputSchema: {
+          type: 'object',
+          properties: {
+            all: { type: 'boolean', description: '是否显示所有容器（包括停止的）', default: true },
+          },
+        },
+      },
+      {
+        name: 'docker_list_images',
+        description: '列出所有Docker镜像',
+        inputSchema: { type: 'object', properties: {} },
+      },
+      {
+        name: 'docker_start',
+        description: '启动Docker容器',
+        inputSchema: {
+          type: 'object',
+          properties: {
+            container: { type: 'string', description: '容器名称或ID' },
+          },
+          required: ['container'],
+        },
+      },
+      {
+        name: 'docker_stop',
+        description: '停止Docker容器',
+        inputSchema: {
+          type: 'object',
+          properties: {
+            container: { type: 'string', description: '容器名称或ID' },
+          },
+          required: ['container'],
+        },
+      },
+      {
+        name: 'docker_restart',
+        description: '重启Docker容器',
+        inputSchema: {
+          type: 'object',
+          properties: {
+            container: { type: 'string', description: '容器名称或ID' },
+          },
+          required: ['container'],
+        },
+      },
+      {
+        name: 'docker_logs',
+        description: '查看Docker容器日志',
+        inputSchema: {
+          type: 'object',
+          properties: {
+            container: { type: 'string', description: '容器名称或ID' },
+            lines: { type: 'number', description: '显示行数', default: 100 },
+          },
+          required: ['container'],
+        },
+      },
+      {
+        name: 'docker_stats',
+        description: '查看Docker容器资源使用情况',
+        inputSchema: {
+          type: 'object',
+          properties: {
+            container: { type: 'string', description: '容器名称或ID' },
+          },
+          required: ['container'],
+        },
+      },
+      {
+        name: 'docker_exec',
+        description: '在Docker容器中执行命令',
+        inputSchema: {
+          type: 'object',
+          properties: {
+            container: { type: 'string', description: '容器名称或ID' },
+            command: { type: 'string', description: '要执行的命令' },
+          },
+          required: ['container', 'command'],
+        },
+      },
+
+      // 系统监控工具
+      {
+        name: 'system_health',
+        description: '获取系统健康状态（CPU、内存、磁盘、负载）',
+        inputSchema: { type: 'object', properties: {} },
+      },
+      {
+        name: 'system_info',
+        description: '获取系统详细信息',
+        inputSchema: { type: 'object', properties: {} },
+      },
+      {
+        name: 'system_processes',
+        description: '查看系统进程列表',
+        inputSchema: {
+          type: 'object',
+          properties: {
+            limit: { type: 'number', description: '显示进程数量', default: 10 },
+          },
+        },
+      },
+      {
+        name: 'system_logs',
+        description: '查看系统日志',
+        inputSchema: {
+          type: 'object',
+          properties: {
+            lines: { type: 'number', description: '显示行数', default: 50 },
+          },
+        },
+      },
+      {
+        name: 'system_ports',
+        description: '查看开放的端口',
+        inputSchema: { type: 'object', properties: {} },
+      },
+
+      // 审计日志
+      {
+        name: 'ssh_audit_log',
+        description: '查看操作审计日志',
+        inputSchema: {
+          type: 'object',
+          properties: {
+            limit: { type: 'number', description: '返回日志条数', default: 50 },
+          },
+        },
+      },
+    ],
+  };
+});
+
+// 工具调用处理
+server.setRequestHandler(CallToolRequestSchema, async (request) => {
+  const { name, arguments: args } = request.params;
+
+  try {
+    switch (name) {
+      // SSH 基础操作
+      case 'ssh_connect': {
+        const result = await sshManager.connect(args);
+        auditLogger.log('ssh_connect', args.host, 'success');
+        return { content: [{ type: 'text', text: result }] };
+      }
+
+      case 'ssh_exec': {
+        const { command, confirm, timeout } = args;
+        const risk = securityChecker.checkCommand(command);
+        
+        if (risk.isDangerous && !confirm) {
+          return {
+            content: [{
+              type: 'text',
+              text: `⚠️ 危险操作警告！\n命令: ${command}\n风险级别: ${risk.level}\n风险原因: ${risk.reason}\n\n请设置 confirm: true 来确认执行此操作。`
+            }],
+            isError: true,
+          };
+        }
+
+        const result = await sshManager.execCommand(command, { timeout });
+        auditLogger.log('ssh_exec', command, 'success', { risk: risk.level });
+        return { content: [{ type: 'text', text: result }] };
+      }
+
+      case 'ssh_upload': {
+        const { localPath, remotePath } = args;
+        const result = await sshManager.uploadFile(localPath, remotePath);
+        auditLogger.log('ssh_upload', `${localPath} -> ${remotePath}`, 'success');
+        return { content: [{ type: 'text', text: result }] };
+      }
+
+      case 'ssh_download': {
+        const { remotePath, localPath } = args;
+        const result = await sshManager.downloadFile(remotePath, localPath);
+        auditLogger.log('ssh_download', `${remotePath} -> ${localPath}`, 'success');
+        return { content: [{ type: 'text', text: result }] };
+      }
+
+      case 'ssh_deploy': {
+        const { projectPath, remotePath, deployScript } = args;
+        const result = await sshManager.deployProject(projectPath, remotePath, deployScript);
+        auditLogger.log('ssh_deploy', `${projectPath} -> ${remotePath}`, 'success');
+        return { content: [{ type: 'text', text: result }] };
+      }
+
+      // Docker 操作
+      case 'docker_list_containers': {
+        const containers = await dockerManager.listContainers(args.all !== false);
+        const formatted = containers.map(c => 
+          `${c.name} (${c.id.substring(0, 12)})\n  镜像: ${c.image}\n  状态: ${c.status}\n  端口: ${c.ports || '无'}`
+        ).join('\n\n');
+        auditLogger.log('docker_list_containers', 'list', 'success');
+        return { content: [{ type: 'text', text: formatted || '没有容器' }] };
+      }
+
+      case 'docker_list_images': {
+        const images = await dockerManager.listImages();
+        const formatted = images.map(i => 
+          `${i.name} (${i.id.substring(0, 12)}) - ${i.size}`
+        ).join('\n');
+        auditLogger.log('docker_list_images', 'list', 'success');
+        return { content: [{ type: 'text', text: formatted || '没有镜像' }] };
+      }
+
+      case 'docker_start': {
+        const result = await dockerManager.startContainer(args.container);
+        auditLogger.log('docker_start', args.container, 'success');
+        return { content: [{ type: 'text', text: result }] };
+      }
+
+      case 'docker_stop': {
+        const result = await dockerManager.stopContainer(args.container);
+        auditLogger.log('docker_stop', args.container, 'success');
+        return { content: [{ type: 'text', text: result }] };
+      }
+
+      case 'docker_restart': {
+        const result = await dockerManager.restartContainer(args.container);
+        auditLogger.log('docker_restart', args.container, 'success');
+        return { content: [{ type: 'text', text: result }] };
+      }
+
+      case 'docker_logs': {
+        const logs = await dockerManager.getContainerLogs(args.container, args.lines || 100);
+        auditLogger.log('docker_logs', args.container, 'success');
+        return { content: [{ type: 'text', text: logs }] };
+      }
+
+      case 'docker_stats': {
+        const stats = await dockerManager.getContainerStats(args.container);
+        const formatted = `容器: ${stats.container}\nCPU: ${stats.cpu}\n内存: ${stats.memory}\n网络: ${stats.network}\n磁盘IO: ${stats.blockIO}`;
+        auditLogger.log('docker_stats', args.container, 'success');
+        return { content: [{ type: 'text', text: formatted }] };
+      }
+
+      case 'docker_exec': {
+        const result = await dockerManager.execInContainer(args.container, args.command);
+        auditLogger.log('docker_exec', `${args.container}: ${args.command}`, 'success');
+        return { content: [{ type: 'text', text: result }] };
+      }
+
+      // 系统监控
+      case 'system_health': {
+        const health = await systemMonitor.getSystemHealth();
+        const formatted = `系统健康状态: ${health.overall === 'healthy' ? '✅ 健康' : '⚠️ 警告'}\n\nCPU使用率: ${health.cpu.usage.toFixed(2)}% (${health.cpu.status})\n内存使用率: ${health.memory.usage.toFixed(2)}% (${health.memory.status})\n磁盘使用率: ${health.disk.usage.toFixed(2)}% (${health.disk.status})\n系统负载: ${health.load.load1}, ${health.load.load5}, ${health.load.load15} (${health.load.status})`;
+        auditLogger.log('system_health', 'check', 'success');
+        return { content: [{ type: 'text', text: formatted }] };
+      }
+
+      case 'system_info': {
+        const info = await sshManager.getSystemInfo();
+        const formatted = `主机名: ${info.hostname}\n操作系统: ${info.os}\n内核版本: ${info.kernel}\n运行时间: ${info.uptime}\nCPU: ${info.cpu}\n内存: ${info.memory}\n磁盘: ${info.disk}`;
+        auditLogger.log('system_info', 'get', 'success');
+        return { content: [{ type: 'text', text: formatted }] };
+      }
+
+      case 'system_processes': {
+        const processes = await systemMonitor.getProcessList(args.limit || 10);
+        const formatted = processes.map(p => 
+          `${p.pid} | ${p.user} | CPU:${p.cpu}% | MEM:${p.memory}% | ${p.command}`
+        ).join('\n');
+        auditLogger.log('system_processes', 'list', 'success');
+        return { content: [{ type: 'text', text: formatted }] };
+      }
+
+      case 'system_logs': {
+        const logs = await systemMonitor.getSystemLogs(args.lines || 50);
+        auditLogger.log('system_logs', 'get', 'success');
+        return { content: [{ type: 'text', text: logs }] };
+      }
+
+      case 'system_ports': {
+        const ports = await systemMonitor.getOpenPorts();
+        const formatted = ports.map(p => 
+          `${p.protocol} | ${p.ip}:${p.port}`
+        ).join('\n');
+        auditLogger.log('system_ports', 'list', 'success');
+        return { content: [{ type: 'text', text: formatted || '没有开放端口' }] };
+      }
+
+      case 'ssh_audit_log': {
+        const logs = auditLogger.getLogs(args.limit || 50);
+        return { content: [{ type: 'text', text: JSON.stringify(logs, null, 2) }] };
+      }
+
+      default:
+        throw new Error(`Unknown tool: ${name}`);
+    }
+  } catch (error) {
+    auditLogger.log(name, JSON.stringify(args), 'error', { error: error.message });
+    return {
+      content: [{ type: 'text', text: `错误: ${error.message}` }],
+      isError: true,
+    };
+  }
+});
+
+async function main() {
+  const transport = new StdioServerTransport();
+  await server.connect(transport);
+  console.error('SSH MCP Server v2.0 running on stdio');
+}
+
+main().catch(console.error);

package/index.js

@@ -0,0 +1,201 @@
+#!/usr/bin/env node
+import { Server } from '@modelcontextprotocol/sdk/server/index.js';
+import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
+import {
+  CallToolRequestSchema,
+  ListToolsRequestSchema,
+} from '@modelcontextprotocol/sdk/types.js';
+import { SSHManager } from './ssh-manager.js';
+import { AuditLogger } from './audit-logger.js';
+import { SecurityChecker } from './security-checker.js';
+
+const server = new Server(
+  {
+    name: 'ssh-mcp-server',
+    version: '1.0.0',
+  },
+  {
+    capabilities: {
+      tools: {},
+    },
+  }
+);
+
+const sshManager = new SSHManager();
+const auditLogger = new AuditLogger();
+const securityChecker = new SecurityChecker();
+
+// 从环境变量读取SSH配置并自动连接
+const sshConfig = {
+  host: process.env.SSH_HOST,
+  port: parseInt(process.env.SSH_PORT || '22'),
+  username: process.env.SSH_USERNAME,
+  password: process.env.SSH_PASSWORD,
+  privateKeyPath: process.env.SSH_PRIVATE_KEY_PATH,
+};
+
+// 如果配置了SSH信息，启动时自动连接
+if (sshConfig.host && sshConfig.username) {
+  sshManager.autoConnect(sshConfig).catch(err => {
+    console.error('自动连接失败:', err.message);
+  });
+}
+
+// 工具列表
+server.setRequestHandler(ListToolsRequestSchema, async () => {
+  return {
+    tools: [
+      {
+        name: 'ssh_connect',
+        description: '连接到远程SSH服务器',
+        inputSchema: {
+          type: 'object',
+          properties: {
+            host: { type: 'string', description: 'SSH服务器地址' },
+            port: { type: 'number', description: 'SSH端口', default: 22 },
+            username: { type: 'string', description: '用户名' },
+            password: { type: 'string', description: '密码（可选）' },
+            privateKey: { type: 'string', description: '私钥路径（可选）' },
+          },
+          required: ['host', 'username'],
+        },
+      },
+      {
+        name: 'ssh_exec',
+        description: '在远程服务器执行命令（危险命令需要确认）',
+        inputSchema: {
+          type: 'object',
+          properties: {
+            command: { type: 'string', description: '要执行的命令' },
+            confirm: { type: 'boolean', description: '确认执行危险操作', default: false },
+          },
+          required: ['command'],
+        },
+      },
+      {
+        name: 'ssh_upload',
+        description: '上传文件到远程服务器',
+        inputSchema: {
+          type: 'object',
+          properties: {
+            localPath: { type: 'string', description: '本地文件路径' },
+            remotePath: { type: 'string', description: '远程目标路径' },
+          },
+          required: ['localPath', 'remotePath'],
+        },
+      },
+      {
+        name: 'ssh_download',
+        description: '从远程服务器下载文件',
+        inputSchema: {
+          type: 'object',
+          properties: {
+            remotePath: { type: 'string', description: '远程文件路径' },
+            localPath: { type: 'string', description: '本地保存路径' },
+          },
+          required: ['remotePath', 'localPath'],
+        },
+      },
+      {
+        name: 'ssh_deploy',
+        description: '自动部署项目（上传代码、安装依赖、重启服务）',
+        inputSchema: {
+          type: 'object',
+          properties: {
+            projectPath: { type: 'string', description: '本地项目路径' },
+            remotePath: { type: 'string', description: '远程部署路径' },
+            deployScript: { type: 'string', description: '部署脚本命令', default: 'npm install && npm run build && pm2 restart app' },
+          },
+          required: ['projectPath', 'remotePath'],
+        },
+      },
+      {
+        name: 'ssh_audit_log',
+        description: '查看操作审计日志',
+        inputSchema: {
+          type: 'object',
+          properties: {
+            limit: { type: 'number', description: '返回日志条数', default: 50 },
+          },
+        },
+      },
+    ],
+  };
+});
+
+// 工具调用处理
+server.setRequestHandler(CallToolRequestSchema, async (request) => {
+  const { name, arguments: args } = request.params;
+
+  try {
+    switch (name) {
+      case 'ssh_connect': {
+        const result = await sshManager.connect(args);
+        auditLogger.log('ssh_connect', args.host, 'success');
+        return { content: [{ type: 'text', text: result }] };
+      }
+
+      case 'ssh_exec': {
+        const { command, confirm } = args;
+        const risk = securityChecker.checkCommand(command);
+        
+        if (risk.isDangerous && !confirm) {
+          return {
+            content: [{
+              type: 'text',
+              text: `⚠️ 危险操作警告！\n命令: ${command}\n风险: ${risk.reason}\n\n请设置 confirm: true 来确认执行此操作。`
+            }],
+            isError: true,
+          };
+        }
+
+        const result = await sshManager.execCommand(command);
+        auditLogger.log('ssh_exec', command, 'success', { risk: risk.level });
+        return { content: [{ type: 'text', text: result }] };
+      }
+
+      case 'ssh_upload': {
+        const { localPath, remotePath } = args;
+        const result = await sshManager.uploadFile(localPath, remotePath);
+        auditLogger.log('ssh_upload', `${localPath} -> ${remotePath}`, 'success');
+        return { content: [{ type: 'text', text: result }] };
+      }
+
+      case 'ssh_download': {
+        const { remotePath, localPath } = args;
+        const result = await sshManager.downloadFile(remotePath, localPath);
+        auditLogger.log('ssh_download', `${remotePath} -> ${localPath}`, 'success');
+        return { content: [{ type: 'text', text: result }] };
+      }
+
+      case 'ssh_deploy': {
+        const { projectPath, remotePath, deployScript } = args;
+        const result = await sshManager.deployProject(projectPath, remotePath, deployScript);
+        auditLogger.log('ssh_deploy', `${projectPath} -> ${remotePath}`, 'success');
+        return { content: [{ type: 'text', text: result }] };
+      }
+
+      case 'ssh_audit_log': {
+        const logs = auditLogger.getLogs(args.limit || 50);
+        return { content: [{ type: 'text', text: JSON.stringify(logs, null, 2) }] };
+      }
+
+      default:
+        throw new Error(`Unknown tool: ${name}`);
+    }
+  } catch (error) {
+    auditLogger.log(name, JSON.stringify(args), 'error', { error: error.message });
+    return {
+      content: [{ type: 'text', text: `错误: ${error.message}` }],
+      isError: true,
+    };
+  }
+});
+
+async function main() {
+  const transport = new StdioServerTransport();
+  await server.connect(transport);
+  console.error('SSH MCP Server running on stdio');
+}
+
+main().catch(console.error);

package/package.json

@@ -0,0 +1,54 @@
+{
+  "name": "ssh-mcp-devops",
+  "version": "2.0.0",
+  "description": "SSH MCP Server for AI-powered DevOps with Docker and System Monitoring",
+  "type": "module",
+  "main": "index-v2.js",
+  "bin": "./index-v2.js",
+  "scripts": {
+    "start": "node index-v2.js",
+    "start:v1": "node index.js",
+    "dev": "node --watch index-v2.js",
+    "test": "node test-local.js"
+  },
+  "keywords": [
+    "mcp",
+    "ssh",
+    "devops",
+    "ai",
+    "docker",
+    "monitoring",
+    "automation",
+    "model-context-protocol"
+  ],
+  "author": "SSH-MCP Team",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/yourusername/ssh-mcp-server.git"
+  },
+  "bugs": {
+    "url": "https://github.com/yourusername/ssh-mcp-server/issues"
+  },
+  "homepage": "https://github.com/yourusername/ssh-mcp-server#readme",
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "files": [
+    "index.js",
+    "index-v2.js",
+    "ssh-manager.js",
+    "ssh-manager-v2.js",
+    "docker-manager.js",
+    "system-monitor.js",
+    "security-checker.js",
+    "audit-logger.js",
+    "README.md",
+    "LICENSE"
+  ],
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.0.4",
+    "ssh2": "^1.15.0",
+    "chalk": "^5.3.0"
+  }
+}