ssh-mcp-pro 1.2.1 → 1.4.0

package/docs/security/hosted-data-inventory.md

@@ -0,0 +1,81 @@
+# Hosted remote-agent data inventory
+
+**Engineering evidence only — not a privacy notice or terms of service.**
+This document describes the repository's remote control-plane source
+on 2026-11-04, **not necessarily the version deployed in production**.
+It does not claim legal compliance or promise any retention period.
+
+## Data handled in the remote control plane
+
+| Category | Recorded data | Implementation evidence |
+| --- | --- | --- |
+| Account identity | GitHub ID/login/name or Google ID/email/name when configured | SQLite `users` in [remote store](../../src/remote/store.ts) |
+| Dashboard sessions | Random browser session token, a stored token hash, user ID and expiry | `dashboard_sessions` in [remote store](../../src/remote/store.ts) and [dashboard](../../src/remote/web-dashboard.ts) |
+| OAuth clients/codes | Client identity, redirect URIs, scopes and hashed authorization codes with expiry and use status | `oauth_clients` and `oauth_authorization_codes` in [remote store](../../src/remote/store.ts) |
+| Devices | Alias, public key, policy, status, host metadata and last seen | `agents` in [remote store](../../src/remote/store.ts) |
+| Enrollment | Hashed one-time tokens with expiration and use status | `agent_enrollment_tokens` in [remote store](../../src/remote/store.ts) |
+| Remote actions | Tool and capability, **arguments**, status, deadline, **result**, and error details | `actions` in [remote store](../../src/remote/store.ts) |
+| Security events | Event type/severity/time, optional user/device/action IDs and metadata | `audit_events` in [remote store](../../src/remote/store.ts) |
+| Local agent credentials | Agent private key, server URL, device ID and execution policy | Local file described in [agent CLI](../../src/remote/agent-cli.ts) |
+
+Remote actions can return stdout, stderr, file output and host logs.
+The [executor](../../src/remote/agent-executor.ts) bounds output sizes,
+but bounded size is **not** automatic secret redaction. Arguments and
+results can contain sensitive host information and are persisted as JSON
+in the action table.
+
+## Expiration and erasure: observed behavior
+
+- Dashboard cookies and session records are valid for 24 hours. Logout
+  deletes the current session, while periodic maintenance also deletes
+  session rows whose expiration time has passed.
+- OAuth authorization codes and device enrollment tokens expire logically
+  and can be used only once. The existing minute maintenance tick also
+  removes physically expired code/token rows. Non-expired rows are retained
+  even if already used.
+- The periodic cleanup also clears in-memory OAuth and connection state.
+  It does **not** impose automatic retention/deletion on users, OAuth
+  clients, devices, action history, audit events or infrastructure logs.
+- Dashboard **Remove device** revokes/disconnects that device, then deletes
+  the device row, associated enrollment token records and its action rows.
+  **Audit events remain** for security review. **Revoke** by itself
+  changes device status and is not the same as Remove device.
+- No account-level export/erasure workflow, audit-erasure workflow, or
+  global retention/deletion job for users, clients, actions and audit
+  events was found in the inspected remote routes and store.
+
+Source: [dashboard](../../src/remote/web-dashboard.ts),
+[store](../../src/remote/store.ts),
+[OAuth handler](../../src/remote/oauth-handler.ts),
+[control plane](../../src/remote/control-plane.ts).
+
+## Deployment and third-party boundaries
+
+The documented [Coolify deployment](../coolify.md) uses one SQLite
+replica and a persistent `/app/data` volume for the database and
+signing keys. Redeploying the application does not itself remove the
+volume. OAuth login involves GitHub or Google depending on configuration.
+Infrastructure access logs, provider-side logs, external processing,
+hosting jurisdiction and infrastructure-level backups **cannot be
+inferred from the repository's database schema**.
+
+## Verify before drafting a user-facing privacy notice and terms
+
+1. Confirm operator identity, responsible contact and intended account scope.
+2. Verify actual hosting region, infrastructure/OAuth processors, logs and
+   their configured retention; do not purchase new services to do so.
+3. Decide accurate retention and deletion behavior for identities, sessions,
+   authorization records, command args/results and audit events. Explain
+   the surviving audit trail after Remove device.
+4. Define an actionable access/correction/deletion request process before
+   promising rights, methods or timelines.
+5. Verify agent/SSH-host data transfer, user responsibilities and any
+   external storage or telemetry not visible in these source files.
+6. Publish **separate**, reviewed HTTPS privacy and terms documents.
+   `SECURITY.md` concerns vulnerability reports; the MIT `LICENSE`
+   concerns source licensing. Neither is a substitute.
+
+ChatGPT, Claude and Gemini application metadata must remain
+`publishReady: false` until these and the other launch conditions
+are genuinely complete. This inventory is engineering
+evidence, **not** a published privacy policy.

package/docs/sonarcloud-analysis.md

@@ -0,0 +1,9 @@
+# SonarQube Cloud analysis
+
+This repository uses **SonarQube Cloud Automatic Analysis** for GitHub pull requests and the default branch. SonarScanner must not run in GitHub Actions while automatic analysis is enabled; the two methods conflict.
+
+The GitHub CI workflow runs Node 24 and 26 test/coverage gates and uploads LCOV coverage artifacts. Vitest enforces local coverage thresholds independently of SonarQube Cloud. SonarQube Cloud automatic analysis **cannot import LCOV coverage**: its quality gate must not be interpreted as measuring this repository's test coverage. The project coverage minimum remains enforced in CI.
+
+Do not add `SONAR_TOKEN`, another Doppler credential-fetch step, or `sonarqube-scan-action` to this workflow for automatic analysis. To migrate back to CI analysis, first explicitly switch off Automatic Analysis in SonarQube Cloud, then implement a single authenticated scanner pipeline and restore LCOV import.
+
+Security and maintainability findings, especially new-code duplication, remain enforced by SonarQube Cloud's independent GitHub PR check. Do not weaken duplication thresholds or bypass repository rules to make CI green.

package/mcp.json

@@ -2,7 +2,7 @@
   "name": "ssh-mcp-pro",
   "display_name": "ssh-mcp-pro",
   "description": "Secure MCP SSH automation server with policy controls, resources, prompts, stdio, and HTTP.",
-  "version": "1.2.1",
+  "version": "1.4.0",
   "author": "Osman Aslan",
   "license": "MIT",
   "runtime": "node",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ssh-mcp-pro",
-  "version": "1.2.1",
+  "version": "1.4.0",
   "mcpName": "io.github.oaslananka/ssh-mcp-pro",
   "description": "Model Context Protocol (MCP) SSH client server for remote automation",
   "type": "module",
@@ -58,52 +58,57 @@
   },
   "engines": {
     "node": ">=22.22.2",
-    "pnpm": "^11.28.5"
+    "pnpm": "^11.28.9"
   },
   "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.32.0",
+    "@modelcontextprotocol/node": "^2.1.2",
+    "@modelcontextprotocol/server": "^2.4.0",
+    "@modelcontextprotocol/server-legacy": "^2.4.0",
     "@opentelemetry/api": "^1.9.1",
     "@opentelemetry/exporter-trace-otlp-http": "^0.222.0",
     "@opentelemetry/resources": "^2.11.0",
     "@opentelemetry/sdk-node": "^0.222.0",
     "@opentelemetry/semantic-conventions": "^1.43.0",
-    "jose": "6.2.3",
+    "html-escaper": "3.0.3",
+    "jose": "6.2.13",
     "node-ssh": "^13.2.1",
     "ws": "^8.21.1",
-    "zod": "^4.4.3"
+    "zod": "^4.6.7"
   },
   "devDependencies": {
+    "@modelcontextprotocol/client": "2.4.0",
     "@stryker-mutator/core": "9.6.1",
     "@stryker-mutator/typescript-checker": "9.6.1",
     "@stryker-mutator/vitest-runner": "9.6.1",
+    "@types/html-escaper": "3.0.4",
     "@types/node": "^24.13.1",
     "@types/ssh2": "^1.15.6",
     "@types/ws": "^8.18.2",
     "@typescript-eslint/eslint-plugin": "^8.71.0",
     "@typescript-eslint/parser": "^8.71.0",
-    "@vitest/coverage-v8": "^4.1.11",
+    "@vitest/coverage-v8": "^4.1.12",
     "ajv": "^8.20.0",
     "autocannon": "^7.15.0",
     "dependency-cruiser": "^17.4.3",
     "eslint": "^10.12.0",
     "fast-check": "^4.10.2",
-    "knip": "^6.39.0",
+    "knip": "^6.44.0",
     "prettier": "^3.9.9",
     "publint": "^0.3.25",
     "typedoc": "0.28.20",
     "typescript": "^6.0.3",
-    "vite": "^7.3.5",
-    "vitest": "^4.1.11"
+    "vite": "7.3.7",
+    "vitest": "^4.1.12"
   },
   "overrides": {
     "brace-expansion": "^5.0.12",
-    "fast-uri": "^3.1.8",
-    "ip-address": "^10.7.1",
-    "nanoid": "^3.3.18",
-    "browserslist": "^4.28.7",
-    "@hono/node-server": "^2.0.5",
-    "markdown-it": "^14.3.2",
-    "vitest": "^4.1.11"
+    "fast-uri": "^3.1.9",
+    "ip-address": "^10.7.5",
+    "nanoid": "^3.3.20",
+    "browserslist": "^4.29.5",
+    "@hono/node-server": "^2.1.3",
+    "markdown-it": "^14.3.3",
+    "vitest": "^4.1.12"
   },
   "scripts": {
     "build": "tsc -p tsconfig.json",
@@ -118,11 +123,11 @@
     "test:perf:baseline": "WRITE_BASELINE=true pnpm run test:perf",
     "test:mutation": "stryker run",
     "test:mutation:ci": "stryker run",
-    "lint": "eslint \"src/**/*.ts\" \"test/**/*.ts\" \"vitest.config.ts\" \"vitest.mutation.config.ts\"",
-    "lint:fix": "eslint \"src/**/*.ts\" \"test/**/*.ts\" \"vitest.config.ts\" \"vitest.mutation.config.ts\" --fix",
+    "lint": "eslint \"src/**/*.ts\" \"test/**/*.ts\" \"vitest.config.ts\" \"vitest.mutation.config.ts\" \"vitest.bench.config.ts\"",
+    "lint:fix": "eslint \"src/**/*.ts\" \"test/**/*.ts\" \"vitest.config.ts\" \"vitest.mutation.config.ts\" \"vitest.bench.config.ts\" --fix",
     "lint:staged": "node scripts/run-staged-checks.mjs --lint-only",
-    "format": "prettier --write \"src/**/*.ts\" \"test/**/*.ts\" \"scripts/**/*.{mjs,cjs}\" \"docs/**/*.md\" \".github/workflows/*.{yml,yaml}\" \"stryker.conf.mjs\" \"vitest.config.ts\" \"vitest.mutation.config.ts\"",
-    "format:check": "prettier --check \"src/**/*.ts\" \"test/**/*.ts\" \"scripts/**/*.{mjs,cjs}\" \"docs/**/*.md\" \".github/workflows/*.{yml,yaml}\" \"stryker.conf.mjs\" \"vitest.config.ts\" \"vitest.mutation.config.ts\"",
+    "format": "prettier --write \"src/**/*.ts\" \"test/**/*.ts\" \"scripts/**/*.{mjs,cjs}\" \"docs/**/*.md\" \".github/workflows/*.{yml,yaml}\" \"stryker.conf.mjs\" \"vitest.config.ts\" \"vitest.mutation.config.ts\" \"vitest.bench.config.ts\"",
+    "format:check": "prettier --check \"src/**/*.ts\" \"test/**/*.ts\" \"scripts/**/*.{mjs,cjs}\" \"docs/**/*.md\" \".github/workflows/*.{yml,yaml}\" \"stryker.conf.mjs\" \"vitest.config.ts\" \"vitest.mutation.config.ts\" \"vitest.bench.config.ts\"",
     "format:staged": "node scripts/run-staged-checks.mjs",
     "docker:ssh-fixture:up": "node scripts/docker-ssh-fixture.mjs up",
     "docker:ssh-fixture:verify": "node scripts/docker-ssh-fixture.mjs verify",
@@ -140,6 +145,7 @@
     "validate:mcp-registry": "node scripts/check-mcp-registry-record.mjs",
     "validate:chatgpt-app": "node scripts/validate-chatgpt-app.mjs",
     "validate:claude-connector": "node scripts/validate-claude-connector.mjs",
+    "validate:google-app": "node scripts/validate-google-app.mjs",
     "check:doc-language": "node scripts/check-doc-language.mjs",
     "check:package-scripts": "node scripts/check-package-scripts.mjs",
     "check:freshness": "node scripts/check-dependency-freshness.mjs --json artifacts/dependency-freshness.json --markdown artifacts/dependency-freshness.md",
@@ -159,17 +165,18 @@
     "pack:check": "node scripts/check-package-contents.mjs",
     "pack:install-smoke": "node scripts/check-package-install-smoke.mjs",
     "pack:lint": "publint --strict=false",
-    "check:knip": "knip -c knip.jsonc --reporter compact || true",
-    "check:circular": "depcruise src --config .dependency-cruiser.mjs || true",
+    "check:knip": "knip -c knip.jsonc --include files,dependencies,unlisted,unresolved,cycles --reporter compact",
+    "check:circular": "depcruise src --config .dependency-cruiser.mjs",
     "check:module-size": "node scripts/check-module-size.mjs",
     "check:maintainability": "pnpm run check:module-size && pnpm run check:circular && pnpm run check:knip",
     "check:quality": "pnpm run format:check && pnpm run check:doc-language && pnpm run check:package-scripts && pnpm run check:rulesets && pnpm run verify:actions-runtime && pnpm run lint && pnpm run typecheck && pnpm run audit && pnpm run licenses:check",
-    "check:package": "pnpm run build && pnpm run sync-version -- --check && pnpm run validate:mcp-metadata && pnpm run validate:chatgpt-app && pnpm run validate:claude-connector && pnpm run docs:check && pnpm run pack:check && pnpm run pack:install-smoke && pnpm run audit:packed",
+    "check:package": "pnpm run build && pnpm run sync-version -- --check && pnpm run validate:mcp-metadata && pnpm run validate:chatgpt-app && pnpm run validate:claude-connector && pnpm run validate:google-app && pnpm run docs:check && pnpm run pack:check && pnpm run pack:install-smoke && pnpm run audit:packed",
     "check:push": "pnpm run format:check && pnpm run lint && pnpm run typecheck && pnpm test",
     "check": "pnpm run check:quality && pnpm run test:coverage && pnpm run check:package",
     "hook:pre-commit": "pnpm run format:staged",
     "hook:pre-push": "pnpm run check:push",
     "release:dry-run": "node scripts/validate-release-please.mjs && node scripts/release-state.mjs --offline --json && pnpm run check:package",
-    "sbom": "node scripts/generate-sbom.mjs"
+    "sbom": "node scripts/generate-sbom.mjs",
+    "bench": "vitest bench --run --config vitest.bench.config.ts"
   }
 }

package/registry/ssh-mcp-pro/mcp.json

@@ -2,7 +2,7 @@
   "name": "ssh-mcp-pro",
   "display_name": "ssh-mcp-pro",
   "description": "Secure MCP SSH automation server with policy controls, resources, prompts, stdio, and HTTP.",
-  "version": "1.2.1",
+  "version": "1.4.0",
   "author": "Osman Aslan",
   "license": "MIT",
   "runtime": "node",

package/server.json

@@ -7,13 +7,13 @@
     "url": "https://github.com/oaslananka/ssh-mcp-pro",
     "source": "github"
   },
-  "version": "1.2.1",
+  "version": "1.4.0",
   "packages": [
     {
       "registryType": "npm",
       "registryBaseUrl": "https://registry.npmjs.org",
       "identifier": "ssh-mcp-pro",
-      "version": "1.2.1",
+      "version": "1.4.0",
       "transport": {
         "type": "stdio"
       }
@@ -22,7 +22,7 @@
       "registryType": "npm",
       "registryBaseUrl": "https://registry.npmjs.org",
       "identifier": "ssh-mcp-pro",
-      "version": "1.2.1",
+      "version": "1.4.0",
       "runtimeHint": "npx",
       "transport": {
         "type": "streamable-http",