ssh-mcp-pro 1.0.0

package/dist/types.d.ts

@@ -0,0 +1,341 @@
+import { z } from "zod";
+/**
+ * Authentication configuration for SSH connections
+ */
+export interface AuthConfig {
+    password?: string;
+    privateKey?: string;
+    privateKeyPath?: string;
+    passphrase?: string;
+    useAgent?: boolean;
+}
+/**
+ * SSH connection parameters
+ */
+export interface ConnectionParams {
+    host: string;
+    policyHost?: string;
+    username: string;
+    port?: number;
+    auth?: "auto" | "password" | "key" | "agent";
+    password?: string;
+    privateKey?: string;
+    privateKeyPath?: string;
+    passphrase?: string;
+    useAgent?: boolean;
+    readyTimeoutMs?: number;
+    ttlMs?: number;
+    strictHostKeyChecking?: boolean;
+    hostKeyPolicy?: HostKeyPolicy;
+    knownHostsPath?: string;
+    expectedHostKeySha256?: string;
+    policyMode?: PolicyMode;
+}
+export type HostKeyPolicy = "strict" | "accept-new" | "insecure";
+export type PolicyMode = "enforce" | "explain";
+/**
+ * SSH session information
+ */
+export interface SessionInfo {
+    sessionId: string;
+    host: string;
+    username: string;
+    port: number;
+    createdAt: number;
+    expiresAt: number;
+    lastUsed: number;
+    policyMode: PolicyMode;
+    hostKeyPolicy: HostKeyPolicy;
+}
+/**
+ * Session creation result
+ */
+export interface SessionResult {
+    sessionId: string;
+    host: string;
+    username: string;
+    sftpAvailable: boolean;
+    expiresInMs: number;
+    policyMode: PolicyMode;
+    hostKeyPolicy: HostKeyPolicy;
+    wouldConnect?: boolean;
+}
+/**
+ * Command execution result
+ */
+export interface ExecResult {
+    code: number;
+    stdout: string;
+    stderr: string;
+    durationMs: number;
+}
+/**
+ * File system entry information
+ */
+export interface FileStatInfo {
+    size: number;
+    mtime: Date;
+    mode: number;
+    type: "file" | "directory" | "symlink" | "other";
+}
+/**
+ * Directory listing entry
+ */
+export interface DirEntry {
+    name: string;
+    type: "file" | "directory" | "symlink" | "other";
+    size?: number;
+    mtime?: Date;
+    mode?: number;
+}
+/**
+ * Directory listing result with pagination
+ */
+export interface DirListResult {
+    entries: DirEntry[];
+    nextToken?: string;
+}
+/**
+ * OS detection result
+ */
+export type Platform = "linux" | "darwin" | "windows" | "unknown";
+export type PackageManager = "apt" | "dnf" | "yum" | "pacman" | "apk" | "zypper" | "brew" | "choco" | "winget" | "unknown";
+export type InitSystem = "systemd" | "service" | "launchd" | "windows-service" | "unknown";
+export type ShellType = "bash" | "sh" | "powershell" | "cmd" | "unknown";
+export interface OSInfo {
+    platform: Platform;
+    distro: string;
+    version: string;
+    arch: string;
+    shell: string;
+    packageManager: PackageManager;
+    init: InitSystem;
+    defaultShell?: ShellType;
+    tempDir?: string;
+}
+/**
+ * Package operation result
+ */
+export interface PackageResult {
+    ok: boolean;
+    pm: string;
+    code: number;
+    stdout: string;
+    stderr: string;
+}
+/**
+ * Service operation result
+ */
+export interface ServiceResult {
+    ok: boolean;
+}
+/**
+ * Lines in file operation result
+ */
+export interface LinesInFileResult {
+    ok: boolean;
+    added: number;
+}
+/**
+ * Patch application result
+ */
+export interface PatchResult {
+    ok: boolean;
+    changed: boolean;
+}
+/**
+ * Custom error codes for SSH MCP operations
+ */
+export declare enum ErrorCode {
+    EAUTH = "EAUTH",
+    ECONN = "ECONN",
+    ETIMEOUT = "ETIMEOUT",
+    ENOSUDO = "ENOSUDO",
+    EPMGR = "EPMGR",
+    EFS = "EFS",
+    EPATCH = "EPATCH",
+    EBADREQ = "EBADREQ",
+    EPOLICY = "EPOLICY",
+    EHOSTKEY = "EHOSTKEY",
+    ELIMIT = "ELIMIT",
+    EUNSUPPORTED = "EUNSUPPORTED"
+}
+/**
+ * Structured error class for SSH MCP operations
+ * Enhanced for ChatGPT/AI assistant integration
+ */
+export declare class SSHMCPError extends Error {
+    code: ErrorCode;
+    hint?: string | undefined;
+    userFriendlyMessage?: string | undefined;
+    recoverable: boolean;
+    suggestedAction?: string | undefined;
+    constructor(code: ErrorCode, message: string, hint?: string | undefined, userFriendlyMessage?: string | undefined, recoverable?: boolean, suggestedAction?: string | undefined);
+    /**
+     * Converts error to a JSON-serializable object for MCP responses
+     */
+    toJSON(): {
+        code: ErrorCode;
+        message: string;
+        hint: string | undefined;
+        userFriendlyMessage: string | undefined;
+        recoverable: boolean;
+        suggestedAction: string | undefined;
+    };
+}
+export declare const ConnectionParamsSchema: z.ZodObject<{
+    host: z.ZodString;
+    username: z.ZodString;
+    port: z.ZodOptional<z.ZodNumber>;
+    auth: z.ZodDefault<z.ZodOptional<z.ZodEnum<{
+        key: "key";
+        auto: "auto";
+        password: "password";
+        agent: "agent";
+    }>>>;
+    password: z.ZodOptional<z.ZodString>;
+    privateKey: z.ZodOptional<z.ZodString>;
+    privateKeyPath: z.ZodOptional<z.ZodString>;
+    passphrase: z.ZodOptional<z.ZodString>;
+    useAgent: z.ZodOptional<z.ZodBoolean>;
+    readyTimeoutMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+    ttlMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+    strictHostKeyChecking: z.ZodOptional<z.ZodBoolean>;
+    hostKeyPolicy: z.ZodDefault<z.ZodOptional<z.ZodEnum<{
+        strict: "strict";
+        "accept-new": "accept-new";
+        insecure: "insecure";
+    }>>>;
+    knownHostsPath: z.ZodOptional<z.ZodString>;
+    expectedHostKeySha256: z.ZodOptional<z.ZodString>;
+    policyMode: z.ZodDefault<z.ZodOptional<z.ZodEnum<{
+        enforce: "enforce";
+        explain: "explain";
+    }>>>;
+}, z.core.$strip>;
+export declare const SessionIdSchema: z.ZodObject<{
+    sessionId: z.ZodString;
+}, z.core.$strip>;
+export declare const ExecSchema: z.ZodObject<{
+    sessionId: z.ZodString;
+    command: z.ZodString;
+    cwd: z.ZodOptional<z.ZodString>;
+    env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    timeoutMs: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>;
+export declare const SudoSchema: z.ZodObject<{
+    sessionId: z.ZodString;
+    command: z.ZodString;
+    cwd: z.ZodOptional<z.ZodString>;
+    timeoutMs: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>;
+export declare const FSReadSchema: z.ZodObject<{
+    sessionId: z.ZodString;
+    path: z.ZodString;
+    encoding: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+    maxBytes: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>;
+export declare const FSWriteSchema: z.ZodObject<{
+    sessionId: z.ZodString;
+    path: z.ZodString;
+    data: z.ZodString;
+    mode: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>;
+export declare const FSStatSchema: z.ZodObject<{
+    sessionId: z.ZodString;
+    path: z.ZodString;
+}, z.core.$strip>;
+export declare const FSListSchema: z.ZodObject<{
+    sessionId: z.ZodString;
+    path: z.ZodString;
+    page: z.ZodOptional<z.ZodNumber>;
+    limit: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+}, z.core.$strip>;
+export declare const FSPathSchema: z.ZodObject<{
+    sessionId: z.ZodString;
+    path: z.ZodString;
+}, z.core.$strip>;
+export declare const FSRenameSchema: z.ZodObject<{
+    sessionId: z.ZodString;
+    from: z.ZodString;
+    to: z.ZodString;
+}, z.core.$strip>;
+export declare const EnsurePackageSchema: z.ZodObject<{
+    sessionId: z.ZodString;
+    name: z.ZodString;
+    state: z.ZodDefault<z.ZodEnum<{
+        present: "present";
+        absent: "absent";
+    }>>;
+}, z.core.$strip>;
+export declare const EnsureServiceSchema: z.ZodObject<{
+    sessionId: z.ZodString;
+    name: z.ZodString;
+    state: z.ZodEnum<{
+        enabled: "enabled";
+        started: "started";
+        stopped: "stopped";
+        restarted: "restarted";
+        disabled: "disabled";
+    }>;
+}, z.core.$strip>;
+export declare const EnsureLinesSchema: z.ZodObject<{
+    sessionId: z.ZodString;
+    path: z.ZodString;
+    lines: z.ZodArray<z.ZodString>;
+    state: z.ZodDefault<z.ZodEnum<{
+        present: "present";
+        absent: "absent";
+    }>>;
+    createIfMissing: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+}, z.core.$strip>;
+export declare const PatchApplySchema: z.ZodObject<{
+    sessionId: z.ZodString;
+    path: z.ZodString;
+    diff: z.ZodString;
+}, z.core.$strip>;
+export declare const HostAliasSchema: z.ZodObject<{
+    hostAlias: z.ZodString;
+}, z.core.$strip>;
+export declare const MetricsFormatSchema: z.ZodObject<{
+    format: z.ZodDefault<z.ZodOptional<z.ZodEnum<{
+        json: "json";
+        prometheus: "prometheus";
+    }>>>;
+}, z.core.$strip>;
+export declare const ExecStreamSchema: z.ZodObject<{
+    sessionId: z.ZodString;
+    command: z.ZodString;
+    cwd: z.ZodOptional<z.ZodString>;
+    env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    timeoutMs: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>;
+export declare const FileUploadSchema: z.ZodObject<{
+    sessionId: z.ZodString;
+    localPath: z.ZodString;
+    remotePath: z.ZodString;
+}, z.core.$strip>;
+export declare const FileDownloadSchema: z.ZodObject<{
+    sessionId: z.ZodString;
+    remotePath: z.ZodString;
+    localPath: z.ZodString;
+}, z.core.$strip>;
+export declare const TunnelLocalForwardSchema: z.ZodObject<{
+    sessionId: z.ZodString;
+    localPort: z.ZodNumber;
+    remoteHost: z.ZodDefault<z.ZodString>;
+    remotePort: z.ZodNumber;
+}, z.core.$strip>;
+export declare const TunnelRemoteForwardSchema: z.ZodObject<{
+    sessionId: z.ZodString;
+    remotePort: z.ZodNumber;
+    localHost: z.ZodDefault<z.ZodString>;
+    localPort: z.ZodNumber;
+}, z.core.$strip>;
+export declare const TunnelCloseSchema: z.ZodObject<{
+    tunnelId: z.ZodString;
+}, z.core.$strip>;
+export declare const TunnelListSchema: z.ZodObject<{
+    sessionId: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,GAAG,UAAU,GAAG,KAAK,GAAG,OAAO,CAAC;IAC7C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,UAAU,CAAC,EAAE,UAAU,CAAC;CACzB;AAED,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,YAAY,GAAG,UAAU,CAAC;AACjE,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,SAAS,CAAC;AAE/C;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,UAAU,CAAC;IACvB,aAAa,EAAE,aAAa,CAAC;CAC9B;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,OAAO,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,UAAU,CAAC;IACvB,aAAa,EAAE,aAAa,CAAC;IAC7B,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,IAAI,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,GAAG,OAAO,CAAC;CAClD;AAED;;GAEG;AACH,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,GAAG,OAAO,CAAC;IACjD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,IAAI,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,QAAQ,EAAE,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,MAAM,QAAQ,GAAG,OAAO,GAAG,QAAQ,GAAG,SAAS,GAAG,SAAS,CAAC;AAElE,MAAM,MAAM,cAAc,GACtB,KAAK,GACL,KAAK,GACL,KAAK,GACL,QAAQ,GACR,KAAK,GACL,QAAQ,GACR,MAAM,GACN,OAAO,GACP,QAAQ,GACR,SAAS,CAAC;AAEd,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG,iBAAiB,GAAG,SAAS,CAAC;AAE3F,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,IAAI,GAAG,YAAY,GAAG,KAAK,GAAG,SAAS,CAAC;AAEzE,MAAM,WAAW,MAAM;IACrB,QAAQ,EAAE,QAAQ,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,cAAc,CAAC;IAC/B,IAAI,EAAE,UAAU,CAAC;IACjB,YAAY,CAAC,EAAE,SAAS,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,OAAO,CAAC;IACZ,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,OAAO,CAAC;CACb;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,EAAE,OAAO,CAAC;CAClB;AAED;;GAEG;AACH,oBAAY,SAAS;IACnB,KAAK,UAAU;IACf,KAAK,UAAU;IACf,QAAQ,aAAa;IACrB,OAAO,YAAY;IACnB,KAAK,UAAU;IACf,GAAG,QAAQ;IACX,MAAM,WAAW;IACjB,OAAO,YAAY;IACnB,OAAO,YAAY;IACnB,QAAQ,aAAa;IACrB,MAAM,WAAW;IACjB,YAAY,iBAAiB;CAC9B;AAED;;;GAGG;AACH,qBAAa,WAAY,SAAQ,KAAK;IAE3B,IAAI,EAAE,SAAS;IAEf,IAAI,CAAC,EAAE,MAAM;IACb,mBAAmB,CAAC,EAAE,MAAM;IAC5B,WAAW,EAAE,OAAO;IACpB,eAAe,CAAC,EAAE,MAAM;gBALxB,IAAI,EAAE,SAAS,EACtB,OAAO,EAAE,MAAM,EACR,IAAI,CAAC,EAAE,MAAM,YAAA,EACb,mBAAmB,CAAC,EAAE,MAAM,YAAA,EAC5B,WAAW,GAAE,OAAc,EAC3B,eAAe,CAAC,EAAE,MAAM,YAAA;IAMjC;;OAEG;IACH,MAAM;;;;;;;;CAUP;AAMD,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAiBjC,CAAC;AAEH,eAAO,MAAM,eAAe;;iBAE1B,CAAC;AAEH,eAAO,MAAM,UAAU;;;;;;iBAMrB,CAAC;AAEH,eAAO,MAAM,UAAU;;;;;iBAKrB,CAAC;AAEH,eAAO,MAAM,YAAY;;;;;iBAKvB,CAAC;AAEH,eAAO,MAAM,aAAa;;;;;iBAKxB,CAAC;AAEH,eAAO,MAAM,YAAY;;;iBAGvB,CAAC;AAEH,eAAO,MAAM,YAAY;;;;;iBAKvB,CAAC;AAEH,eAAO,MAAM,YAAY;;;iBAGvB,CAAC;AAEH,eAAO,MAAM,cAAc;;;;iBAIzB,CAAC;AAEH,eAAO,MAAM,mBAAmB;;;;;;;iBAI9B,CAAC;AAEH,eAAO,MAAM,mBAAmB;;;;;;;;;;iBAI9B,CAAC;AAEH,eAAO,MAAM,iBAAiB;;;;;;;;;iBAM5B,CAAC;AAEH,eAAO,MAAM,gBAAgB;;;;iBAI3B,CAAC;AAEH,eAAO,MAAM,eAAe;;iBAE1B,CAAC;AAEH,eAAO,MAAM,mBAAmB;;;;;iBAE9B,CAAC;AAEH,eAAO,MAAM,gBAAgB;;;;;;iBAM3B,CAAC;AAEH,eAAO,MAAM,gBAAgB;;;;iBAI3B,CAAC;AAEH,eAAO,MAAM,kBAAkB;;;;iBAI7B,CAAC;AAEH,eAAO,MAAM,wBAAwB;;;;;iBAKnC,CAAC;AAEH,eAAO,MAAM,yBAAyB;;;;;iBAKpC,CAAC;AAEH,eAAO,MAAM,iBAAiB;;iBAE5B,CAAC;AAEH,eAAO,MAAM,gBAAgB;;iBAE3B,CAAC"}

package/dist/types.js

@@ -0,0 +1,184 @@
+import { z } from "zod";
+/**
+ * Custom error codes for SSH MCP operations
+ */
+export var ErrorCode;
+(function (ErrorCode) {
+    ErrorCode["EAUTH"] = "EAUTH";
+    ErrorCode["ECONN"] = "ECONN";
+    ErrorCode["ETIMEOUT"] = "ETIMEOUT";
+    ErrorCode["ENOSUDO"] = "ENOSUDO";
+    ErrorCode["EPMGR"] = "EPMGR";
+    ErrorCode["EFS"] = "EFS";
+    ErrorCode["EPATCH"] = "EPATCH";
+    ErrorCode["EBADREQ"] = "EBADREQ";
+    ErrorCode["EPOLICY"] = "EPOLICY";
+    ErrorCode["EHOSTKEY"] = "EHOSTKEY";
+    ErrorCode["ELIMIT"] = "ELIMIT";
+    ErrorCode["EUNSUPPORTED"] = "EUNSUPPORTED";
+})(ErrorCode || (ErrorCode = {}));
+/**
+ * Structured error class for SSH MCP operations
+ * Enhanced for ChatGPT/AI assistant integration
+ */
+export class SSHMCPError extends Error {
+    code;
+    hint;
+    userFriendlyMessage;
+    recoverable;
+    suggestedAction;
+    constructor(code, message, hint, userFriendlyMessage, recoverable = true, suggestedAction) {
+        super(message);
+        this.code = code;
+        this.hint = hint;
+        this.userFriendlyMessage = userFriendlyMessage;
+        this.recoverable = recoverable;
+        this.suggestedAction = suggestedAction;
+        this.name = "SSHMCPError";
+    }
+    /**
+     * Converts error to a JSON-serializable object for MCP responses
+     */
+    toJSON() {
+        return {
+            code: this.code,
+            message: this.message,
+            hint: this.hint,
+            userFriendlyMessage: this.userFriendlyMessage,
+            recoverable: this.recoverable,
+            suggestedAction: this.suggestedAction,
+        };
+    }
+}
+// Zod schemas for input validation
+const EnvKeySchema = z.string().regex(/^[A-Za-z_][A-Za-z0-9_]*$/u);
+const EnvMapSchema = z.record(EnvKeySchema, z.string());
+export const ConnectionParamsSchema = z.object({
+    host: z.string().min(1),
+    username: z.string().min(1),
+    port: z.number().min(1).max(65535).optional(),
+    auth: z.enum(["auto", "password", "key", "agent"]).optional().default("auto"),
+    password: z.string().optional(),
+    privateKey: z.string().optional(),
+    privateKeyPath: z.string().optional(),
+    passphrase: z.string().optional(),
+    useAgent: z.boolean().optional(),
+    readyTimeoutMs: z.number().min(1000).optional().default(20000),
+    ttlMs: z.number().min(10000).optional().default(900000),
+    strictHostKeyChecking: z.boolean().optional(),
+    hostKeyPolicy: z.enum(["strict", "accept-new", "insecure"]).optional().default("strict"),
+    knownHostsPath: z.string().optional(),
+    expectedHostKeySha256: z.string().optional(),
+    policyMode: z.enum(["enforce", "explain"]).optional().default("enforce"),
+});
+export const SessionIdSchema = z.object({
+    sessionId: z.string().min(1),
+});
+export const ExecSchema = z.object({
+    sessionId: z.string().min(1),
+    command: z.string().min(1),
+    cwd: z.string().optional(),
+    env: EnvMapSchema.optional(),
+    timeoutMs: z.number().min(1000).optional().describe("Command execution timeout in milliseconds"),
+});
+export const SudoSchema = z.object({
+    sessionId: z.string().min(1),
+    command: z.string().min(1),
+    cwd: z.string().optional(),
+    timeoutMs: z.number().min(1000).optional().describe("Command execution timeout in milliseconds"),
+});
+export const FSReadSchema = z.object({
+    sessionId: z.string().min(1),
+    path: z.string().min(1),
+    encoding: z.string().optional().default("utf8"),
+    maxBytes: z.number().int().min(1).optional(),
+});
+export const FSWriteSchema = z.object({
+    sessionId: z.string().min(1),
+    path: z.string().min(1),
+    data: z.string(),
+    mode: z.number().optional(),
+});
+export const FSStatSchema = z.object({
+    sessionId: z.string().min(1),
+    path: z.string().min(1),
+});
+export const FSListSchema = z.object({
+    sessionId: z.string().min(1),
+    path: z.string().min(1),
+    page: z.number().min(0).optional(),
+    limit: z.number().min(1).max(1000).optional().default(100),
+});
+export const FSPathSchema = z.object({
+    sessionId: z.string().min(1),
+    path: z.string().min(1),
+});
+export const FSRenameSchema = z.object({
+    sessionId: z.string().min(1),
+    from: z.string().min(1),
+    to: z.string().min(1),
+});
+export const EnsurePackageSchema = z.object({
+    sessionId: z.string().min(1),
+    name: z.string().min(1),
+    state: z.enum(["present", "absent"]).default("present"),
+});
+export const EnsureServiceSchema = z.object({
+    sessionId: z.string().min(1),
+    name: z.string().min(1),
+    state: z.enum(["started", "stopped", "restarted", "enabled", "disabled"]),
+});
+export const EnsureLinesSchema = z.object({
+    sessionId: z.string().min(1),
+    path: z.string().min(1),
+    lines: z.array(z.string()),
+    state: z.enum(["present", "absent"]).default("present"),
+    createIfMissing: z.boolean().optional().default(true),
+});
+export const PatchApplySchema = z.object({
+    sessionId: z.string().min(1),
+    path: z.string().min(1),
+    diff: z.string(),
+});
+export const HostAliasSchema = z.object({
+    hostAlias: z.string().min(1),
+});
+export const MetricsFormatSchema = z.object({
+    format: z.enum(["json", "prometheus"]).optional().default("json"),
+});
+export const ExecStreamSchema = z.object({
+    sessionId: z.string().min(1),
+    command: z.string().min(1),
+    cwd: z.string().optional(),
+    env: EnvMapSchema.optional(),
+    timeoutMs: z.number().min(1000).optional().describe("Streaming command timeout in milliseconds"),
+});
+export const FileUploadSchema = z.object({
+    sessionId: z.string().min(1),
+    localPath: z.string().min(1),
+    remotePath: z.string().min(1),
+});
+export const FileDownloadSchema = z.object({
+    sessionId: z.string().min(1),
+    remotePath: z.string().min(1),
+    localPath: z.string().min(1),
+});
+export const TunnelLocalForwardSchema = z.object({
+    sessionId: z.string().min(1),
+    localPort: z.number().int().min(1).max(65535),
+    remoteHost: z.string().min(1).default("localhost"),
+    remotePort: z.number().int().min(1).max(65535),
+});
+export const TunnelRemoteForwardSchema = z.object({
+    sessionId: z.string().min(1),
+    remotePort: z.number().int().min(1).max(65535),
+    localHost: z.string().min(1).default("localhost"),
+    localPort: z.number().int().min(1).max(65535),
+});
+export const TunnelCloseSchema = z.object({
+    tunnelId: z.string().min(1),
+});
+export const TunnelListSchema = z.object({
+    sessionId: z.string().min(1).optional(),
+});
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AA8KxB;;GAEG;AACH,MAAM,CAAN,IAAY,SAaX;AAbD,WAAY,SAAS;IACnB,4BAAe,CAAA;IACf,4BAAe,CAAA;IACf,kCAAqB,CAAA;IACrB,gCAAmB,CAAA;IACnB,4BAAe,CAAA;IACf,wBAAW,CAAA;IACX,8BAAiB,CAAA;IACjB,gCAAmB,CAAA;IACnB,gCAAmB,CAAA;IACnB,kCAAqB,CAAA;IACrB,8BAAiB,CAAA;IACjB,0CAA6B,CAAA;AAC/B,CAAC,EAbW,SAAS,KAAT,SAAS,QAapB;AAED;;;GAGG;AACH,MAAM,OAAO,WAAY,SAAQ,KAAK;IAE3B;IAEA;IACA;IACA;IACA;IANT,YACS,IAAe,EACtB,OAAe,EACR,IAAa,EACb,mBAA4B,EAC5B,cAAuB,IAAI,EAC3B,eAAwB;QAE/B,KAAK,CAAC,OAAO,CAAC,CAAC;QAPR,SAAI,GAAJ,IAAI,CAAW;QAEf,SAAI,GAAJ,IAAI,CAAS;QACb,wBAAmB,GAAnB,mBAAmB,CAAS;QAC5B,gBAAW,GAAX,WAAW,CAAgB;QAC3B,oBAAe,GAAf,eAAe,CAAS;QAG/B,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,MAAM;QACJ,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;YAC7C,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,eAAe,EAAE,IAAI,CAAC,eAAe;SACtC,CAAC;IACJ,CAAC;CACF;AAED,mCAAmC;AACnC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;AACnE,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;AAExD,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE;IAC7C,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;IAC7E,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACrC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAChC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAC9D,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;IACvD,qBAAqB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC7C,aAAa,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC;IACxF,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACrC,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5C,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC;CACzE,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC7B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,GAAG,EAAE,YAAY,CAAC,QAAQ,EAAE;IAC5B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;CACjG,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;CACjG,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;IAC/C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC7C,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC5B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACxB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAClC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;CAC3D,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACxB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACtB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;CACxD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;CAC1E,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC1B,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IACvD,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;CACtD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;CACjB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC7B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;CAClE,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,GAAG,EAAE,YAAY,CAAC,QAAQ,EAAE;IAC5B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;CACjG,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC9B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC7B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;IAC7C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;IAClD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;CAC/C,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;IAC9C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;IACjD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;CAC9C,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC5B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACxC,CAAC,CAAC"}

package/docs/docker.md

@@ -0,0 +1,22 @@
+# Docker Usage
+
+Build the local production image:
+
+```bash
+docker build -t ssh-mcp-pro:local .
+```
+
+Run CLI smoke checks:
+
+```bash
+docker run --rm ssh-mcp-pro:local --version
+docker run --rm ssh-mcp-pro:local --help
+```
+
+Run the HTTP transport on loopback on Linux hosts that support host networking:
+
+```bash
+docker run --rm --network host ssh-mcp-pro:local http --host 127.0.0.1 --port 3000
+```
+
+For bridge or port-mapped containers, binding inside the container to `0.0.0.0` is a non-loopback HTTP deployment. Configure bearer or OAuth auth, allowed origins, `SSH_MCP_HTTP_PUBLIC_URL`, `SSH_MCP_ALLOWED_HOSTS`, strict host-key verification, and a remote-safe tool profile. The process refuses unsafe public bindings at startup.

package/examples/README.md

@@ -0,0 +1,77 @@
+# ssh-mcp-pro Examples
+
+These examples are written for v2 secure defaults. Start with discovery, open one session per host, inspect capabilities, then prefer structured tools over raw shell commands.
+
+## Safe Connection
+
+```text
+Use the safe-connect prompt. Connect to prod-1.example.com as deploy with hostKeyPolicy=strict, then list active sessions.
+```
+
+For a lab host that is not in `known_hosts` yet:
+
+```text
+Open a session to lab-router as admin with hostKeyPolicy=accept-new, then run os_detect.
+```
+
+## Explain Before Mutating
+
+```text
+Open a session to web-1 as deploy with policyMode=explain. Plan how you would update /etc/nginx/nginx.conf to add gzip settings, including policy verdicts and rollback.
+```
+
+## Read And Inspect
+
+```text
+Connect to web-1 as deploy, run os_detect, read ssh-mcp-pro://policy/effective, then show df -h and uptime.
+```
+
+## File Operations
+
+```text
+Read /etc/nginx/nginx.conf with fs_read. If it is larger than the read limit, use file_download instead.
+```
+
+```text
+List /var/log with fs_list, then read the newest nginx error log if it is within the configured file-size limit.
+```
+
+## Managed Configuration Change
+
+```text
+Use the managed-config-change prompt for /etc/ssh/sshd_config. Read the file, propose a minimal unified diff, dry-run the patch, then apply only if policy allows it.
+```
+
+## Package And Service Management
+
+Prefer idempotent tools:
+
+```text
+Ensure htop is present on the host, then report whether anything changed.
+```
+
+```text
+Ensure nginx is restarted only after checking policy and explaining the service impact.
+```
+
+## Transfers
+
+```text
+Upload ./release.tar.gz to /tmp/release.tar.gz with file_upload and report the SHA-256 verification result.
+```
+
+```text
+Download /var/log/app/app.log to ./app.log with file_download and confirm checksum verification.
+```
+
+## Tunnels
+
+```text
+Create a local tunnel from localhost:15432 to remote database host db.internal:5432, list active tunnels, then close the tunnel when finished.
+```
+
+## BusyBox/dropbear Targets
+
+```text
+Connect to my embedded host, inspect whether SFTP is available, then use fs_stat and fs_list on /tmp. If a helper is unsupported, explain the capability gap.
+```

package/mcp.json

@@ -0,0 +1,21 @@
+{
+  "name": "ssh-mcp-pro",
+  "display_name": "ssh-mcp-pro",
+  "description": "Secure MCP SSH automation server with policy controls, resources, prompts, stdio, and HTTP.",
+  "version": "1.0.0",
+  "author": "Osman Aslan",
+  "license": "MIT",
+  "runtime": "node",
+  "entrypoint": "dist/index.js",
+  "transport": "stdio",
+  "platforms": [
+    "linux",
+    "macos",
+    "windows"
+  ],
+  "capabilities": {
+    "tools": true,
+    "resources": true,
+    "prompts": true
+  }
+}