ssh-mcp-pro 1.2.3 → 1.4.2

package/CHANGELOG.md

@@ -5,6 +5,77 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.4.2](https://github.com/oaslananka/ssh-mcp-pro/compare/ssh-mcp-pro-v1.4.1...ssh-mcp-pro-v1.4.2) (2026-11-10)
+
+
+### Bug Fixes
+
+* **cli:** validate agent commands and break config import cycle ([e216b93](https://github.com/oaslananka/ssh-mcp-pro/commit/e216b9347805579918b928a43c654fc5dce48197))
+
+## [1.4.1](https://github.com/oaslananka/ssh-mcp-pro/compare/ssh-mcp-pro-v1.4.0...ssh-mcp-pro-v1.4.1) (2026-11-10)
+
+
+### Bug Fixes
+
+* bind agent WebSocket to enrolled control-plane origin ([#194](https://github.com/oaslananka/ssh-mcp-pro/issues/194)) ([7ab181f](https://github.com/oaslananka/ssh-mcp-pro/commit/7ab181f474d283fb15358f467f89b42be2ba9236))
+* harden Windows acceptance and dashboard onboarding ([#191](https://github.com/oaslananka/ssh-mcp-pro/issues/191)) ([d950b65](https://github.com/oaslananka/ssh-mcp-pro/commit/d950b65d42f4938e7b75feed94949a0d5a8e6050))
+* make dashboard copy actions accessible and readable ([#193](https://github.com/oaslananka/ssh-mcp-pro/issues/193)) ([f6a8c94](https://github.com/oaslananka/ssh-mcp-pro/commit/f6a8c94e72b55b17296e795195710e21fe80672b))
+
+## [1.4.0](https://github.com/oaslananka/ssh-mcp-pro/compare/ssh-mcp-pro-v1.3.0...ssh-mcp-pro-v1.4.0) (2026-11-06)
+
+
+### Features
+
+* **mcp:** support 2026 protocol on authenticated remote-agent endpoint ([#181](https://github.com/oaslananka/ssh-mcp-pro/issues/181)) ([8f5df37](https://github.com/oaslananka/ssh-mcp-pro/commit/8f5df3700657118d26743eebf314bdb3850cceb7))
+* **remote:** add hosted dashboard and Coolify deployment support ([#127](https://github.com/oaslananka/ssh-mcp-pro/issues/127)) ([7a4ba63](https://github.com/oaslananka/ssh-mcp-pro/commit/7a4ba63cc8d2a3ec8080ecdddf57e854d08e1de2))
+
+
+### Bug Fixes
+
+* **agent:** launch Windows scheduled task with npm CMD shim ([#130](https://github.com/oaslananka/ssh-mcp-pro/issues/130)) ([cf6fdb5](https://github.com/oaslananka/ssh-mcp-pro/commit/cf6fdb511af552d0538659a8fa7420bb586cfb69))
+* **agent:** resolve Linux npm CLI discovery and system runtime identity ([#176](https://github.com/oaslananka/ssh-mcp-pro/issues/176)) ([16b7ce3](https://github.com/oaslananka/ssh-mcp-pro/commit/16b7ce3ea57931482e46af539223e2e481d47c35))
+* **agent:** restart service after enrollment identity changes ([#180](https://github.com/oaslananka/ssh-mcp-pro/issues/180)) ([d770763](https://github.com/oaslananka/ssh-mcp-pro/commit/d770763936a5e1c7f0c40e87414a8917f1c21b7a))
+* **agent:** restart Windows agent after WebSocket disconnect ([#129](https://github.com/oaslananka/ssh-mcp-pro/issues/129)) ([8df07ee](https://github.com/oaslananka/ssh-mcp-pro/commit/8df07ee08a55eb665679dffc33d8701b4e063ca9))
+* **agent:** surface Linux installer download failures ([#132](https://github.com/oaslananka/ssh-mcp-pro/issues/132)) ([79f166d](https://github.com/oaslananka/ssh-mcp-pro/commit/79f166d50ffd52d0b9253b318703486fd5a72e8a))
+* **apps:** correct publication legal-document attestations ([#157](https://github.com/oaslananka/ssh-mcp-pro/issues/157)) ([7e8b42d](https://github.com/oaslananka/ssh-mcp-pro/commit/7e8b42d9e5032c657fd65920c004bafc3d41abf6))
+* **auth:** restrict fixture identities to loopback test mode ([#128](https://github.com/oaslananka/ssh-mcp-pro/issues/128)) ([a0a1d19](https://github.com/oaslananka/ssh-mcp-pro/commit/a0a1d1991dc665db3be2a017ddea039d4b642803))
+* **automation:** avoid stalled dependency PR creation ([#153](https://github.com/oaslananka/ssh-mcp-pro/issues/153)) ([209c084](https://github.com/oaslananka/ssh-mcp-pro/commit/209c084294188a46baf878bfc326676b25e49781))
+* **dashboard:** correct Gemini and Copilot setup examples ([#161](https://github.com/oaslananka/ssh-mcp-pro/issues/161)) ([be00c8c](https://github.com/oaslananka/ssh-mcp-pro/commit/be00c8c0f77c38d08b6b68f78e6fe2118c1bfeb2))
+* **dashboard:** correct MCP client setup examples ([#146](https://github.com/oaslananka/ssh-mcp-pro/issues/146)) ([71ed56a](https://github.com/oaslananka/ssh-mcp-pro/commit/71ed56a45f024812cf15d89f4de861cf631a65bd))
+* **dashboard:** display host metadata and stream agent activity logs ([#183](https://github.com/oaslananka/ssh-mcp-pro/issues/183)) ([30d294a](https://github.com/oaslananka/ssh-mcp-pro/commit/30d294acb367ae06d25ec1caff9f68bad113ea2d))
+* **dashboard:** distinguish remote MCP connector setup ([#147](https://github.com/oaslananka/ssh-mcp-pro/issues/147)) ([621948d](https://github.com/oaslananka/ssh-mcp-pro/commit/621948d03bffe62282daa96dbb41d741aca83311))
+* **dashboard:** make navigation keyboard accessible ([#160](https://github.com/oaslananka/ssh-mcp-pro/issues/160)) ([6261f7f](https://github.com/oaslananka/ssh-mcp-pro/commit/6261f7f3b92a53b7f9e474e6159aa36c468a6ed3))
+* **dashboard:** remove revoked devices from inventory ([#149](https://github.com/oaslananka/ssh-mcp-pro/issues/149)) ([715edb8](https://github.com/oaslananka/ssh-mcp-pro/commit/715edb8511f908d70bb2400767942cd17e3bbe21))
+* **dashboard:** separate device revoke and remove actions ([#182](https://github.com/oaslananka/ssh-mcp-pro/issues/182)) ([1e78176](https://github.com/oaslananka/ssh-mcp-pro/commit/1e7817642ebead581435fc169d9a46eed74fa6f6))
+* **docs:** mark Google cloud connector as not publish-ready ([#134](https://github.com/oaslananka/ssh-mcp-pro/issues/134)) ([c3889af](https://github.com/oaslananka/ssh-mcp-pro/commit/c3889afda29889dfa3cbd96b55c28fe852fc9dc6))
+* **http:** classify invalid JSON requests as bad input ([#136](https://github.com/oaslananka/ssh-mcp-pro/issues/136)) ([7fbbee2](https://github.com/oaslananka/ssh-mcp-pro/commit/7fbbee20f8ea141b36230dd8336d16172da525da))
+* **http:** deny browser origins with no explicit allowlist ([#135](https://github.com/oaslananka/ssh-mcp-pro/issues/135)) ([ac3bf2c](https://github.com/oaslananka/ssh-mcp-pro/commit/ac3bf2cbdd6a63d92812b07b194b0b35269a040f))
+* **oauth:** allow configured identity provider form redirects ([#150](https://github.com/oaslananka/ssh-mcp-pro/issues/150)) ([d78c067](https://github.com/oaslananka/ssh-mcp-pro/commit/d78c0676df29066e903bc53d2244944e6d82f819))
+* **oauth:** prevent Chromium form redirects and restore enrollment tokens ([#179](https://github.com/oaslananka/ssh-mcp-pro/issues/179)) ([19f337c](https://github.com/oaslananka/ssh-mcp-pro/commit/19f337c9161e5496313349c66317586676cbb910))
+* **oauth:** use registered Google callback for dashboard and MCP ([#178](https://github.com/oaslananka/ssh-mcp-pro/issues/178)) ([638d3f5](https://github.com/oaslananka/ssh-mcp-pro/commit/638d3f55ba4bb462c518a3fa8af3a4262c294414))
+* **release:** add provenance-verified v1.3.0 asset recovery ([#126](https://github.com/oaslananka/ssh-mcp-pro/issues/126)) ([42254ec](https://github.com/oaslananka/ssh-mcp-pro/commit/42254ec23e50afa75cbd0fd467898fc93ab403f8))
+* **release:** classify pinned legacy SSE migration bridge as advisory ([#123](https://github.com/oaslananka/ssh-mcp-pro/issues/123)) ([f262e93](https://github.com/oaslananka/ssh-mcp-pro/commit/f262e93c10465a96a002ee27c8dd77e69ad62dcb))
+* **release:** sync Gemini connector version metadata ([#141](https://github.com/oaslananka/ssh-mcp-pro/issues/141)) ([feada05](https://github.com/oaslananka/ssh-mcp-pro/commit/feada051b38b7825a2142a0c8c78eae1b37e17f1))
+* **remote:** advertise HSTS for HTTPS endpoints ([#155](https://github.com/oaslananka/ssh-mcp-pro/issues/155)) ([1c8baac](https://github.com/oaslananka/ssh-mcp-pro/commit/1c8baacb813a1dcb441a587c7b316999517fdddb))
+* **remote:** prune expired transient credential records ([#159](https://github.com/oaslananka/ssh-mcp-pro/issues/159)) ([a8b0dfc](https://github.com/oaslananka/ssh-mcp-pro/commit/a8b0dfc9023f7e6d31b43d1004857b6b3b4e9c44))
+* **test:** bind SSH fixture to loopback without sudo ([#133](https://github.com/oaslananka/ssh-mcp-pro/issues/133)) ([3c0a80f](https://github.com/oaslananka/ssh-mcp-pro/commit/3c0a80ffad507ab167a5ad7bc37a0ca513b478e6))
+
+## [1.3.0](https://github.com/oaslananka/ssh-mcp-pro/compare/ssh-mcp-pro-v1.2.3...ssh-mcp-pro-v1.3.0) (2026-11-02)
+
+
+### Features
+
+* **mcp:** support 2026 protocol on standard transports ([#121](https://github.com/oaslananka/ssh-mcp-pro/issues/121)) ([c975504](https://github.com/oaslananka/ssh-mcp-pro/commit/c975504f1b0d0e8ea270be3f87f6191e8bec1fa9))
+
+
+### Bug Fixes
+
+* **docker:** patch Alpine musl CVE-2026-107891 ([#98](https://github.com/oaslananka/ssh-mcp-pro/issues/98)) ([4186138](https://github.com/oaslananka/ssh-mcp-pro/commit/41861382dacfc3b25c6715b303f30d54f3c605bb))
+* **quality:** remove stale lock helper and simplify safe string escaping ([#114](https://github.com/oaslananka/ssh-mcp-pro/issues/114)) ([d8d6c56](https://github.com/oaslananka/ssh-mcp-pro/commit/d8d6c565debc3cfbfb425ba16a71ad29e49c483c))
+* **reliability:** report actual retry attempts and parallelize independent version checks ([#119](https://github.com/oaslananka/ssh-mcp-pro/issues/119)) ([bc64b36](https://github.com/oaslananka/ssh-mcp-pro/commit/bc64b36a33b15aa9a9ee418f4f06ccb4b87f33f0))
+* **security:** reject unsafe Windows shim path characters ([#100](https://github.com/oaslananka/ssh-mcp-pro/issues/100)) ([083e133](https://github.com/oaslananka/ssh-mcp-pro/commit/083e133b81affb79a192ed6859f680ce0f79f478))
+* **ssh:** apply multi-pattern Host options to every alias ([#120](https://github.com/oaslananka/ssh-mcp-pro/issues/120)) ([6d7b9f2](https://github.com/oaslananka/ssh-mcp-pro/commit/6d7b9f2a98712a18c6cb23002ed5a08152c0b02b))
+
 ## [1.2.3](https://github.com/oaslananka/ssh-mcp-pro/compare/ssh-mcp-pro-v1.2.2...ssh-mcp-pro-v1.2.3) (2026-10-09)
 
 

package/MIGRATION.md

@@ -6,8 +6,8 @@ Version `1.0.0` is the initial public baseline for this repository. There are no
 
 When upgrading within `1.x`, preserve these compatibility expectations:
 
-- Node.js must satisfy `^22.22.2 || ^24.15.0`.
-- pnpm must satisfy `^11.0.9`.
+- Node.js must satisfy `>=22.22.2` (Node 24 and 26 are tested in CI).
+- pnpm must satisfy `^11.28.10` for current development and build tooling.
 - Existing stdio MCP client configs can continue to launch `ssh-mcp-pro` with no arguments.
 - HTTP deployments should keep explicit authentication, allowed origins, host allowlists, strict host-key verification, and a remote-safe tool profile.
 

package/README.md

@@ -1,17 +1,36 @@
 <h1 align="center">ssh-mcp-pro</h1>
 
+<p align="center"><strong>Policy-controlled SSH automation for MCP clients</strong></p>
+
+<p align="center">
+  <a href="INSTALL.md">Installation</a> ·
+  <a href="#quickstart">Quickstart</a> ·
+  <a href="https://oaslananka.github.io/ssh-mcp-pro/">API Docs</a> ·
+  <a href="https://deepwiki.com/oaslananka/ssh-mcp-pro">DeepWiki</a>
+</p>
+
 <p align="center">
-  <a href="https://www.npmjs.com/package/ssh-mcp-pro"><img alt="npm version" src="https://img.shields.io/npm/v/ssh-mcp-pro.svg" /></a>
-  <a href="https://www.npmjs.com/package/ssh-mcp-pro"><img alt="npm downloads" src="https://img.shields.io/npm/dt/ssh-mcp-pro.svg" /></a>
-  <a href="LICENSE"><img alt="license" src="https://img.shields.io/badge/license-MIT-blue.svg" /></a>
-  <a href="https://github.com/oaslananka/ssh-mcp-pro/actions/workflows/ci.yml"><img alt="CI" src="https://github.com/oaslananka/ssh-mcp-pro/actions/workflows/ci.yml/badge.svg" /></a>
-  <a href="https://oaslananka.github.io/ssh-mcp-pro/"><img alt="API Docs" src="https://github.com/oaslananka/ssh-mcp-pro/actions/workflows/docs.yml/badge.svg" /></a>
+  <a href="https://www.npmjs.com/package/ssh-mcp-pro"><img alt="npm published version" src="https://img.shields.io/npm/v/ssh-mcp-pro?style=flat&amp;logo=npm" /></a>
+  <a href="https://github.com/oaslananka/ssh-mcp-pro/releases/latest"><img alt="GitHub release version" src="https://img.shields.io/github/v/release/oaslananka/ssh-mcp-pro?style=flat&amp;label=GitHub%20Release" /></a>
+  <a href="#prerequisites"><img alt="Node.js supported major versions: 22, 24, 26" src="https://img.shields.io/badge/Node.js-22%20%7C%2024%20%7C%2026-43853d?style=flat&amp;logo=nodedotjs&amp;logoColor=white" /></a>
+  <a href="LICENSE"><img alt="MIT license" src="https://img.shields.io/badge/License-MIT-ffcf33?style=flat" /></a>
+  <a href="https://oaslananka.github.io/ssh-mcp-pro/"><img alt="API documentation" src="https://img.shields.io/badge/Docs-API-2980b9?style=flat" /></a>
 </p>
 
 <p align="center">
-  <a href="https://www.buymeacoffee.com/oaslananka">
-    <img src="https://img.buymeacoffee.com/button-api/?text=Buy%20me%20a%20coffee&emoji=%E2%98%95&slug=oaslananka&button_colour=FFDD00&font_colour=000000&font_family=Arial&outline_colour=000000&coffee_colour=ffffff" alt="Buy me a coffee" />
-  </a>
+  <a href="https://github.com/oaslananka/ssh-mcp-pro/actions/workflows/ci.yml"><img alt="Main CI workflow status" src="https://github.com/oaslananka/ssh-mcp-pro/actions/workflows/ci.yml/badge.svg?branch=main" /></a>
+  <a href="https://github.com/oaslananka/ssh-mcp-pro/actions/workflows/codeql.yml"><img alt="CodeQL analysis workflow status" src="https://github.com/oaslananka/ssh-mcp-pro/actions/workflows/codeql.yml/badge.svg?branch=main" /></a>
+</p>
+
+<p align="center">
+  <a href="https://www.npmjs.com/package/ssh-mcp-pro"><img alt="All-time npm downloads (not unique users)" src="https://img.shields.io/npm/dt/ssh-mcp-pro?style=flat&amp;label=npm%20downloads" /></a>
+  <a href="https://gitgem.org/github/oaslananka/ssh-mcp-pro"><img alt="GitGem project listing" src="https://gitgem.org/api/badge/github/oaslananka/ssh-mcp-pro.svg" /></a>
+</p>
+
+<p align="center">
+  <a href="https://github.com/sponsors/oaslananka"><img alt="Sponsor through GitHub Sponsors" src="https://img.shields.io/badge/GitHub-Sponsors-ea4aaa?style=flat&amp;logo=githubsponsors" /></a>
+  <a href="https://www.buymeacoffee.com/oaslananka"><img alt="Support through Buy Me a Coffee" src="https://img.shields.io/badge/Buy%20Me%20a%20Coffee-Support-ffdd00?style=flat&amp;logo=buymeacoffee&amp;logoColor=000000" /></a>
+  <a href="https://github.com/oaslananka/ssh-mcp-pro"><img alt="Stars: live GitHub repository star count; visit repository to star" src="https://img.shields.io/github/stars/oaslananka/ssh-mcp-pro?style=flat&amp;label=Stars&amp;color=8e65d3" /></a>
 </p>
 
 ssh-mcp-pro is a secure Model Context Protocol (MCP) server for SSH automation. It lets MCP-capable clients open SSH sessions, inspect hosts, run guarded commands, manage files, transfer artifacts, create tunnels, and perform idempotent package or service work through policy-controlled tools.
@@ -19,12 +38,14 @@ ssh-mcp-pro is a secure Model Context Protocol (MCP) server for SSH automation.
 ## Prerequisites
 
 - Node.js `>=22.22.2` or `>=24.15.0` or `>=26.3.0`
-- pnpm `>=11.0.9`
+- pnpm `^11.28.10` (use Corepack for development)
 - SSH access to the target hosts
 - Docker, only for local integration tests and container image builds
 
 ## Installation
 
+For Windows/Linux outbound agent connection status, rotating diagnostics and a live PowerShell log view, see [Agent Activity Monitor](docs/agent-activity-monitor.md).
+
 Install globally with pnpm:
 
 ```bash
@@ -47,7 +68,7 @@ pnpm dlx ssh-mcp-pro
 Container images are published to GitHub Container Registry for release tags:
 
 ```bash
-docker run --rm ghcr.io/oaslananka/ssh-mcp-pro:1.0.0 --version
+docker run --rm ghcr.io/oaslananka/ssh-mcp-pro:1.4.1 --version
 ```
 
 Images are published for `linux/amd64` and `linux/arm64` with exact semver and
@@ -67,11 +88,11 @@ Generic stdio MCP config:
 }
 ```
 
-VS Code settings style:
+VS Code workspace `.vscode/mcp.json` configuration:
 
 ```json
 {
-  "mcp.servers": {
+  "servers": {
     "ssh-mcp-pro": {
       "type": "stdio",
       "command": "ssh-mcp-pro",
@@ -219,7 +240,7 @@ ssh-mcp-pro starts with strict SSH host-key verification, denies root login, den
   task (tutorial, how-to, reference, explanation).
 - [docs/troubleshooting.md](docs/troubleshooting.md) covers common failure modes.
 
-## Project Health & Governance
+## Project Health &amp; Governance
 
 - [GOVERNANCE.md](GOVERNANCE.md) describes how decisions are made today.
 - [MAINTAINERS.md](MAINTAINERS.md) lists current maintainers.

package/SECURITY_DECISIONS.md

@@ -80,6 +80,25 @@ The flow is intentional:
 
 These findings are dismissed individually with a false-positive rationale. No broad CodeQL suppression is used.
 
+### CodeQL #156: required signed agent hello
+
+CodeQL alert #156 (`js/file-access-to-http`) traces the locally stored agent
+configuration through the signed `agent.hello` WebSocket send. This is
+**intentional authenticated protocol traffic**, not an arbitrary upload of
+the configuration file. The message contains the agent ID, capability names,
+version, host metadata, nonce, timestamp, and Ed25519 signature. It does
+**not** include the saved private key or enrollment token.
+
+As defense in depth, enrollment and subsequent agent startup now check that
+the WebSocket destination has the **same host and port** as the explicitly
+enrolled HTTP(S) server, uses the matching WS(S) transport without a downgrade,
+and contains no URL credentials, query, or fragment. Configured custom
+WebSocket paths still work. Mismatched enrollment responses are rejected
+without saving a config; modified saved destinations are rejected before
+connecting. Do not suppress this rule globally or weaken legitimate signed
+hello delivery to silence taint analysis.
+
+
 ## Other CodeQL False-Positive Dispositions
 
 - **`js/file-access-to-http` in `scripts/check-dependency-freshness.mjs` (`fetchJson`)**: annotated in-code with `codeql[js/file-access-to-http]`. Every URL reaching `fetch()` is either a hardcoded constant or built by `registryPackageUrl()`, which validates the package name against `assertNpmPackageName()` before use; names originate from this repository's own `package.json`, not external input.

package/dist/agent-bin.js

@@ -1,8 +1,11 @@
 #!/usr/bin/env node
 import { runAgentCli } from "./remote/agent-cli.js";
-runAgentCli(process.argv.slice(2)).catch((error) => {
+try {
+    await runAgentCli(process.argv.slice(2));
+}
+catch (error) {
     const message = error instanceof Error ? error.message : String(error);
     process.stderr.write(`${message}\n`);
     process.exit(1);
-});
+}
 //# sourceMappingURL=agent-bin.js.map

package/dist/agent-bin.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent-bin.js","sourceRoot":"","sources":["../src/agent-bin.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAEpD,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;IAC1D,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,IAAI,CAAC,CAAC;IACrC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}
+{"version":3,"file":"agent-bin.js","sourceRoot":"","sources":["../src/agent-bin.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAEpD,IAAI,CAAC;IACH,MAAM,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAC3C,CAAC;AAAC,OAAO,KAAc,EAAE,CAAC;IACxB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,IAAI,CAAC,CAAC;IACrC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC"}

package/dist/cli.d.ts

@@ -13,4 +13,5 @@ export interface CliOptions {
     agentArgs?: string[];
 }
 export declare function parseArgs(argv: string[]): CliOptions;
+export declare function applyHttpCliEnvironment(opts: CliOptions, env?: NodeJS.ProcessEnv): void;
 //# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,OAAO,CAAC;IACpB,SAAS,EAAE,OAAO,GAAG,MAAM,CAAC;IAC5B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,eAAe,EAAE,OAAO,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,2BAA2B,CAAC,EAAE,MAAM,CAAC;IACrC,kBAAkB,EAAE,OAAO,CAAC;IAC5B,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,UAAU,CAmGpD"}
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,OAAO,CAAC;IACpB,SAAS,EAAE,OAAO,GAAG,MAAM,CAAC;IAC5B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,eAAe,EAAE,OAAO,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,2BAA2B,CAAC,EAAE,MAAM,CAAC;IACrC,kBAAkB,EAAE,OAAO,CAAC;IAC5B,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;CACtB;AAaD,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,UAAU,CA8DpD;AAGD,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,UAAU,EAChB,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,IAAI,CAmBN"}

package/dist/cli.js

@@ -1,3 +1,10 @@
+const VALUE_OPTIONS = new Map([
+    ["--host", "host"],
+    ["--port", "port"],
+    ["--bearer-token-file", "bearerTokenFile"],
+    ["--tool-profile", "toolProfile"],
+    ["--connector-credential-provider", "connectorCredentialProvider"],
+]);
 export function parseArgs(argv) {
     const opts = {
         help: false,
@@ -9,11 +16,19 @@ export function parseArgs(argv) {
     };
     for (let index = 0; index < argv.length; index++) {
         const arg = argv[index];
+        const valueOption = VALUE_OPTIONS.get(arg ?? "");
+        if (valueOption) {
+            const next = argv[index + 1];
+            if (next !== undefined) {
+                opts[valueOption] = next;
+                index++;
+            }
+            continue;
+        }
         switch (arg) {
             case "agent":
                 opts.agentArgs = argv.slice(index + 1);
-                index = argv.length;
-                break;
+                return opts;
             case "http":
                 opts.transport = "http";
                 break;
@@ -38,54 +53,9 @@ export function parseArgs(argv) {
             case "--transport=stdio":
                 opts.transport = "stdio";
                 break;
-            case "--host":
-                {
-                    const next = argv[index + 1];
-                    if (next !== undefined) {
-                        opts.host = next;
-                        index++;
-                    }
-                }
-                break;
-            case "--port":
-                {
-                    const next = argv[index + 1];
-                    if (next !== undefined) {
-                        opts.port = next;
-                        index++;
-                    }
-                }
-                break;
-            case "--bearer-token-file":
-                {
-                    const next = argv[index + 1];
-                    if (next !== undefined) {
-                        opts.bearerTokenFile = next;
-                        index++;
-                    }
-                }
-                break;
             case "--enable-legacy-sse":
                 opts.enableLegacySse = true;
                 break;
-            case "--tool-profile":
-                {
-                    const next = argv[index + 1];
-                    if (next !== undefined) {
-                        opts.toolProfile = next;
-                        index++;
-                    }
-                }
-                break;
-            case "--connector-credential-provider":
-                {
-                    const next = argv[index + 1];
-                    if (next !== undefined) {
-                        opts.connectorCredentialProvider = next;
-                        index++;
-                    }
-                }
-                break;
             case "--no-stdio":
                 opts.unsupportedNoStdio = true;
                 break;
@@ -96,4 +66,25 @@ export function parseArgs(argv) {
     }
     return opts;
 }
+// Apply HTTP CLI overrides without changing values omitted by the caller.
+export function applyHttpCliEnvironment(opts, env = process.env) {
+    if (opts.host) {
+        env.SSH_MCP_HTTP_HOST = opts.host;
+    }
+    if (opts.port) {
+        env.SSH_MCP_HTTP_PORT = opts.port;
+    }
+    if (opts.bearerTokenFile) {
+        env.SSH_MCP_HTTP_BEARER_TOKEN_FILE = opts.bearerTokenFile;
+    }
+    if (opts.enableLegacySse) {
+        env.SSH_MCP_ENABLE_LEGACY_SSE = "true";
+    }
+    if (opts.toolProfile) {
+        env.SSH_MCP_TOOL_PROFILE = opts.toolProfile;
+    }
+    if (opts.connectorCredentialProvider) {
+        env.SSH_MCP_CONNECTOR_CREDENTIAL_PROVIDER = opts.connectorCredentialProvider;
+    }
+}
 //# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAeA,MAAM,UAAU,SAAS,CAAC,IAAc;IACtC,MAAM,IAAI,GAAe;QACvB,IAAI,EAAE,KAAK;QACX,OAAO,EAAE,KAAK;QACd,UAAU,EAAE,KAAK;QACjB,SAAS,EAAE,OAAO;QAClB,eAAe,EAAE,KAAK;QACtB,kBAAkB,EAAE,KAAK;KAC1B,CAAC;IAEF,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QACjD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QACxB,QAAQ,GAAG,EAAE,CAAC;YACZ,KAAK,OAAO;gBACV,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;gBACvC,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC;gBACpB,MAAM;YACR,KAAK,MAAM;gBACT,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC;gBACxB,MAAM;YACR,KAAK,OAAO;gBACV,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC;gBACzB,MAAM;YACR,KAAK,QAAQ,CAAC;YACd,KAAK,IAAI;gBACP,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;gBACjB,MAAM;YACR,KAAK,WAAW,CAAC;YACjB,KAAK,IAAI;gBACP,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;gBACpB,MAAM;YACR,KAAK,SAAS;gBACZ,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;gBACvB,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC;gBACzB,MAAM;YACR,KAAK,kBAAkB;gBACrB,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC;gBACxB,MAAM;YACR,KAAK,mBAAmB;gBACtB,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC;gBACzB,MAAM;YACR,KAAK,QAAQ;gBACX,CAAC;oBACC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;oBAC7B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;wBACvB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;wBACjB,KAAK,EAAE,CAAC;oBACV,CAAC;gBACH,CAAC;gBACD,MAAM;YACR,KAAK,QAAQ;gBACX,CAAC;oBACC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;oBAC7B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;wBACvB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;wBACjB,KAAK,EAAE,CAAC;oBACV,CAAC;gBACH,CAAC;gBACD,MAAM;YACR,KAAK,qBAAqB;gBACxB,CAAC;oBACC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;oBAC7B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;wBACvB,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;wBAC5B,KAAK,EAAE,CAAC;oBACV,CAAC;gBACH,CAAC;gBACD,MAAM;YACR,KAAK,qBAAqB;gBACxB,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,gBAAgB;gBACnB,CAAC;oBACC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;oBAC7B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;wBACvB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;wBACxB,KAAK,EAAE,CAAC;oBACV,CAAC;gBACH,CAAC;gBACD,MAAM;YACR,KAAK,iCAAiC;gBACpC,CAAC;oBACC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;oBAC7B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;wBACvB,IAAI,CAAC,2BAA2B,GAAG,IAAI,CAAC;wBACxC,KAAK,EAAE,CAAC;oBACV,CAAC;gBACH,CAAC;gBACD,MAAM;YACR,KAAK,YAAY;gBACf,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC;gBAC/B,MAAM;YACR;gBACE,iEAAiE;gBACjE,MAAM;QACV,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAeA,MAAM,aAAa,GAAG,IAAI,GAAG,CAG3B;IACA,CAAC,QAAQ,EAAE,MAAM,CAAC;IAClB,CAAC,QAAQ,EAAE,MAAM,CAAC;IAClB,CAAC,qBAAqB,EAAE,iBAAiB,CAAC;IAC1C,CAAC,gBAAgB,EAAE,aAAa,CAAC;IACjC,CAAC,iCAAiC,EAAE,6BAA6B,CAAC;CACnE,CAAC,CAAC;AAEH,MAAM,UAAU,SAAS,CAAC,IAAc;IACtC,MAAM,IAAI,GAAe;QACvB,IAAI,EAAE,KAAK;QACX,OAAO,EAAE,KAAK;QACd,UAAU,EAAE,KAAK;QACjB,SAAS,EAAE,OAAO;QAClB,eAAe,EAAE,KAAK;QACtB,kBAAkB,EAAE,KAAK;KAC1B,CAAC;IAEF,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QACjD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QACxB,MAAM,WAAW,GAAG,aAAa,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;QACjD,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;YAC7B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,IAAI,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC;gBACzB,KAAK,EAAE,CAAC;YACV,CAAC;YACD,SAAS;QACX,CAAC;QACD,QAAQ,GAAG,EAAE,CAAC;YACZ,KAAK,OAAO;gBACV,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;gBACvC,OAAO,IAAI,CAAC;YACd,KAAK,MAAM;gBACT,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC;gBACxB,MAAM;YACR,KAAK,OAAO;gBACV,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC;gBACzB,MAAM;YACR,KAAK,QAAQ,CAAC;YACd,KAAK,IAAI;gBACP,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;gBACjB,MAAM;YACR,KAAK,WAAW,CAAC;YACjB,KAAK,IAAI;gBACP,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;gBACpB,MAAM;YACR,KAAK,SAAS;gBACZ,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;gBACvB,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC;gBACzB,MAAM;YACR,KAAK,kBAAkB;gBACrB,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC;gBACxB,MAAM;YACR,KAAK,mBAAmB;gBACtB,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC;gBACzB,MAAM;YACR,KAAK,qBAAqB;gBACxB,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,YAAY;gBACf,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC;gBAC/B,MAAM;YACR;gBACE,iEAAiE;gBACjE,MAAM;QACV,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,uBAAuB,CACrC,IAAgB,EAChB,MAAyB,OAAO,CAAC,GAAG;IAEpC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,GAAG,CAAC,iBAAiB,GAAG,IAAI,CAAC,IAAI,CAAC;IACpC,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,GAAG,CAAC,iBAAiB,GAAG,IAAI,CAAC,IAAI,CAAC;IACpC,CAAC;IACD,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;QACzB,GAAG,CAAC,8BAA8B,GAAG,IAAI,CAAC,eAAe,CAAC;IAC5D,CAAC;IACD,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;QACzB,GAAG,CAAC,yBAAyB,GAAG,MAAM,CAAC;IACzC,CAAC;IACD,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,GAAG,CAAC,oBAAoB,GAAG,IAAI,CAAC,WAAW,CAAC;IAC9C,CAAC;IACD,IAAI,IAAI,CAAC,2BAA2B,EAAE,CAAC;QACrC,GAAG,CAAC,qCAAqC,GAAG,IAAI,CAAC,2BAA2B,CAAC;IAC/E,CAAC;AACH,CAAC"}

package/dist/config-security-env.d.ts

@@ -0,0 +1,4 @@
+import type { ServerConfig } from "./config-types.js";
+/** Apply security and policy environment values before programmatic overrides. */
+export declare function applySecurityPolicyEnvironment(config: ServerConfig): void;
+//# sourceMappingURL=config-security-env.d.ts.map

package/dist/config-security-env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-security-env.d.ts","sourceRoot":"","sources":["../src/config-security-env.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAiGtD,kFAAkF;AAClF,wBAAgB,8BAA8B,CAAC,MAAM,EAAE,YAAY,GAAG,IAAI,CA4BzE"}

package/dist/config-security-env.js

@@ -0,0 +1,64 @@
+import { loadPolicyFile, parseBoolean, parseHostKeyPolicy, parseList } from "./config-parsers.js";
+/** Prefer non-empty environment lists, otherwise retain file/default policy lists. */
+function resolvePolicyList(value, fallback) {
+    const parsed = parseList(value);
+    return parsed.length ? parsed : fallback;
+}
+/** Keep ordinary allow/deny path and host lists independent from tunnel policy. */
+function resolveGeneralPolicyLists(config, filePolicy) {
+    return {
+        allowedHosts: resolvePolicyList(process.env.SSH_MCP_ALLOWED_HOSTS, filePolicy.allowedHosts ?? config.policy.allowedHosts),
+        commandAllow: resolvePolicyList(process.env.SSH_MCP_COMMAND_ALLOW, filePolicy.commandAllow ?? config.policy.commandAllow),
+        commandDeny: resolvePolicyList(process.env.SSH_MCP_COMMAND_DENY, filePolicy.commandDeny ?? config.policy.commandDeny),
+        pathAllowPrefixes: resolvePolicyList(process.env.SSH_MCP_PATH_ALLOW_PREFIXES, filePolicy.pathAllowPrefixes ?? config.policy.pathAllowPrefixes),
+        pathDenyPrefixes: resolvePolicyList(process.env.SSH_MCP_PATH_DENY_PREFIXES, filePolicy.pathDenyPrefixes ?? config.policy.pathDenyPrefixes),
+        localPathAllowPrefixes: resolvePolicyList(process.env.SSH_MCP_LOCAL_PATH_ALLOW_PREFIXES, filePolicy.localPathAllowPrefixes ?? config.policy.localPathAllowPrefixes),
+        localPathDenyPrefixes: resolvePolicyList(process.env.SSH_MCP_LOCAL_PATH_DENY_PREFIXES, filePolicy.localPathDenyPrefixes ?? config.policy.localPathDenyPrefixes),
+    };
+}
+function resolveTunnelPolicyLists(config, filePolicy) {
+    return {
+        tunnelAllowBindHosts: resolvePolicyList(process.env.SSH_MCP_TUNNEL_ALLOW_BIND_HOSTS, filePolicy.tunnelAllowBindHosts ?? config.policy.tunnelAllowBindHosts),
+        tunnelDenyBindHosts: resolvePolicyList(process.env.SSH_MCP_TUNNEL_DENY_BIND_HOSTS, filePolicy.tunnelDenyBindHosts ?? config.policy.tunnelDenyBindHosts),
+        tunnelAllowRemoteHosts: resolvePolicyList(process.env.SSH_MCP_TUNNEL_ALLOW_REMOTE_HOSTS, filePolicy.tunnelAllowRemoteHosts ?? config.policy.tunnelAllowRemoteHosts),
+        tunnelDenyRemoteHosts: resolvePolicyList(process.env.SSH_MCP_TUNNEL_DENY_REMOTE_HOSTS, filePolicy.tunnelDenyRemoteHosts ?? config.policy.tunnelDenyRemoteHosts),
+        tunnelAllowPorts: resolvePolicyList(process.env.SSH_MCP_TUNNEL_ALLOW_PORTS, filePolicy.tunnelAllowPorts ?? config.policy.tunnelAllowPorts),
+        tunnelDenyPorts: resolvePolicyList(process.env.SSH_MCP_TUNNEL_DENY_PORTS, filePolicy.tunnelDenyPorts ?? config.policy.tunnelDenyPorts),
+    };
+}
+/** Preserve host-key migration precedence and root-login policy coupling. */
+function applyHostKeyEnvironment(config) {
+    const strictHostKeyChecking = process.env.STRICT_HOST_KEY_CHECKING ?? process.env.SSH_MCP_STRICT_HOST_KEY;
+    if (strictHostKeyChecking !== undefined) {
+        config.security.hostKeyPolicy = parseBoolean(strictHostKeyChecking, true)
+            ? "strict"
+            : "insecure";
+    }
+    config.security.hostKeyPolicy = parseHostKeyPolicy(process.env.SSH_MCP_HOST_KEY_POLICY, config.security.hostKeyPolicy);
+    config.security.knownHostsPath =
+        process.env.KNOWN_HOSTS_PATH ??
+            process.env.SSH_MCP_KNOWN_HOSTS_PATH ??
+            config.security.knownHostsPath;
+    config.security.allowRootLogin = parseBoolean(process.env.SSH_MCP_ALLOW_ROOT_LOGIN, config.security.allowRootLogin);
+    config.security.allowedCiphers = parseList(process.env.SSH_MCP_ALLOWED_CIPHERS);
+}
+/** Apply security and policy environment values before programmatic overrides. */
+export function applySecurityPolicyEnvironment(config) {
+    applyHostKeyEnvironment(config);
+    const filePolicy = loadPolicyFile(process.env.SSH_MCP_POLICY_FILE);
+    config.policy = {
+        ...config.policy,
+        ...filePolicy,
+        mode: process.env.SSH_MCP_POLICY_MODE === "explain"
+            ? "explain"
+            : (filePolicy.mode ?? config.policy.mode),
+        allowRootLogin: config.security.allowRootLogin,
+        allowRawSudo: parseBoolean(process.env.SSH_MCP_ALLOW_RAW_SUDO, filePolicy.allowRawSudo ?? config.policy.allowRawSudo),
+        allowDestructiveCommands: parseBoolean(process.env.SSH_MCP_ALLOW_DESTRUCTIVE_COMMANDS, filePolicy.allowDestructiveCommands ?? config.policy.allowDestructiveCommands),
+        allowDestructiveFs: parseBoolean(process.env.SSH_MCP_ALLOW_DESTRUCTIVE_FS, filePolicy.allowDestructiveFs ?? config.policy.allowDestructiveFs),
+        ...resolveGeneralPolicyLists(config, filePolicy),
+        ...resolveTunnelPolicyLists(config, filePolicy),
+    };
+    config.policy.allowRootLogin = config.security.allowRootLogin;
+}
+//# sourceMappingURL=config-security-env.js.map

package/dist/config-security-env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-security-env.js","sourceRoot":"","sources":["../src/config-security-env.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAElG,sFAAsF;AACtF,SAAS,iBAAiB,CAAC,KAAyB,EAAE,QAAkB;IACtE,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAChC,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC3C,CAAC;AAED,mFAAmF;AACnF,SAAS,yBAAyB,CAAC,MAAoB,EAAE,UAAiC;IACxF,OAAO;QACL,YAAY,EAAE,iBAAiB,CAC7B,OAAO,CAAC,GAAG,CAAC,qBAAqB,EACjC,UAAU,CAAC,YAAY,IAAI,MAAM,CAAC,MAAM,CAAC,YAAY,CACtD;QACD,YAAY,EAAE,iBAAiB,CAC7B,OAAO,CAAC,GAAG,CAAC,qBAAqB,EACjC,UAAU,CAAC,YAAY,IAAI,MAAM,CAAC,MAAM,CAAC,YAAY,CACtD;QACD,WAAW,EAAE,iBAAiB,CAC5B,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAChC,UAAU,CAAC,WAAW,IAAI,MAAM,CAAC,MAAM,CAAC,WAAW,CACpD;QACD,iBAAiB,EAAE,iBAAiB,CAClC,OAAO,CAAC,GAAG,CAAC,2BAA2B,EACvC,UAAU,CAAC,iBAAiB,IAAI,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAChE;QACD,gBAAgB,EAAE,iBAAiB,CACjC,OAAO,CAAC,GAAG,CAAC,0BAA0B,EACtC,UAAU,CAAC,gBAAgB,IAAI,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAC9D;QACD,sBAAsB,EAAE,iBAAiB,CACvC,OAAO,CAAC,GAAG,CAAC,iCAAiC,EAC7C,UAAU,CAAC,sBAAsB,IAAI,MAAM,CAAC,MAAM,CAAC,sBAAsB,CAC1E;QACD,qBAAqB,EAAE,iBAAiB,CACtC,OAAO,CAAC,GAAG,CAAC,gCAAgC,EAC5C,UAAU,CAAC,qBAAqB,IAAI,MAAM,CAAC,MAAM,CAAC,qBAAqB,CACxE;KACF,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAAC,MAAoB,EAAE,UAAiC;IACvF,OAAO;QACL,oBAAoB,EAAE,iBAAiB,CACrC,OAAO,CAAC,GAAG,CAAC,+BAA+B,EAC3C,UAAU,CAAC,oBAAoB,IAAI,MAAM,CAAC,MAAM,CAAC,oBAAoB,CACtE;QACD,mBAAmB,EAAE,iBAAiB,CACpC,OAAO,CAAC,GAAG,CAAC,8BAA8B,EAC1C,UAAU,CAAC,mBAAmB,IAAI,MAAM,CAAC,MAAM,CAAC,mBAAmB,CACpE;QACD,sBAAsB,EAAE,iBAAiB,CACvC,OAAO,CAAC,GAAG,CAAC,iCAAiC,EAC7C,UAAU,CAAC,sBAAsB,IAAI,MAAM,CAAC,MAAM,CAAC,sBAAsB,CAC1E;QACD,qBAAqB,EAAE,iBAAiB,CACtC,OAAO,CAAC,GAAG,CAAC,gCAAgC,EAC5C,UAAU,CAAC,qBAAqB,IAAI,MAAM,CAAC,MAAM,CAAC,qBAAqB,CACxE;QACD,gBAAgB,EAAE,iBAAiB,CACjC,OAAO,CAAC,GAAG,CAAC,0BAA0B,EACtC,UAAU,CAAC,gBAAgB,IAAI,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAC9D;QACD,eAAe,EAAE,iBAAiB,CAChC,OAAO,CAAC,GAAG,CAAC,yBAAyB,EACrC,UAAU,CAAC,eAAe,IAAI,MAAM,CAAC,MAAM,CAAC,eAAe,CAC5D;KACF,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,SAAS,uBAAuB,CAAC,MAAoB;IACnD,MAAM,qBAAqB,GACzB,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC;IAC9E,IAAI,qBAAqB,KAAK,SAAS,EAAE,CAAC;QACxC,MAAM,CAAC,QAAQ,CAAC,aAAa,GAAG,YAAY,CAAC,qBAAqB,EAAE,IAAI,CAAC;YACvE,CAAC,CAAC,QAAQ;YACV,CAAC,CAAC,UAAU,CAAC;IACjB,CAAC;IACD,MAAM,CAAC,QAAQ,CAAC,aAAa,GAAG,kBAAkB,CAChD,OAAO,CAAC,GAAG,CAAC,uBAAuB,EACnC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAC9B,CAAC;IACF,MAAM,CAAC,QAAQ,CAAC,cAAc;QAC5B,OAAO,CAAC,GAAG,CAAC,gBAAgB;YAC5B,OAAO,CAAC,GAAG,CAAC,wBAAwB;YACpC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC;IACjC,MAAM,CAAC,QAAQ,CAAC,cAAc,GAAG,YAAY,CAC3C,OAAO,CAAC,GAAG,CAAC,wBAAwB,EACpC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAC/B,CAAC;IACF,MAAM,CAAC,QAAQ,CAAC,cAAc,GAAG,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;AAClF,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,8BAA8B,CAAC,MAAoB;IACjE,uBAAuB,CAAC,MAAM,CAAC,CAAC;IAEhC,MAAM,UAAU,GAAG,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IACnE,MAAM,CAAC,MAAM,GAAG;QACd,GAAG,MAAM,CAAC,MAAM;QAChB,GAAG,UAAU;QACb,IAAI,EACF,OAAO,CAAC,GAAG,CAAC,mBAAmB,KAAK,SAAS;YAC3C,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;QAC7C,cAAc,EAAE,MAAM,CAAC,QAAQ,CAAC,cAAc;QAC9C,YAAY,EAAE,YAAY,CACxB,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAClC,UAAU,CAAC,YAAY,IAAI,MAAM,CAAC,MAAM,CAAC,YAAY,CACtD;QACD,wBAAwB,EAAE,YAAY,CACpC,OAAO,CAAC,GAAG,CAAC,kCAAkC,EAC9C,UAAU,CAAC,wBAAwB,IAAI,MAAM,CAAC,MAAM,CAAC,wBAAwB,CAC9E;QACD,kBAAkB,EAAE,YAAY,CAC9B,OAAO,CAAC,GAAG,CAAC,4BAA4B,EACxC,UAAU,CAAC,kBAAkB,IAAI,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAClE;QACD,GAAG,yBAAyB,CAAC,MAAM,EAAE,UAAU,CAAC;QAChD,GAAG,wBAAwB,CAAC,MAAM,EAAE,UAAU,CAAC;KAChD,CAAC;IACF,MAAM,CAAC,MAAM,CAAC,cAAc,GAAG,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC;AAChE,CAAC"}

package/dist/config-types.d.ts

@@ -0,0 +1,82 @@
+import type { ConnectorCredentialProvider } from "./config-parsers.js";
+import type { ToolProfile } from "./connector-profile.js";
+import type { PolicyConfig } from "./policy.js";
+import type { HostKeyPolicy } from "./types.js";
+/**
+ * Server configuration options
+ */
+export interface ServerConfig {
+    /** Maximum concurrent sessions */
+    maxSessions: number;
+    /** Default session TTL in milliseconds */
+    sessionTtlMs: number;
+    /** Session cleanup interval in milliseconds */
+    cleanupIntervalMs: number;
+    /** Default command timeout in milliseconds */
+    commandTimeoutMs: number;
+    /** Maximum buffered stdout/stderr per command result (bytes) */
+    maxCommandOutputBytes: number;
+    /** Maximum streaming chunks retained in memory */
+    maxStreamChunks: number;
+    /** Maximum file size for read operations (bytes) */
+    maxFileSize: number;
+    /** Maximum file write payload size accepted before buffering (bytes) */
+    maxFileWriteBytes: number;
+    /** Maximum file transfer size (bytes) */
+    maxTransferBytes: number;
+    /** Enable debug logging */
+    debug: boolean;
+    /** Rate limiting configuration */
+    rateLimit: {
+        enabled: boolean;
+        maxRequests: number;
+        windowMs: number;
+        perSession: {
+            enabled: boolean;
+            maxRequests: number;
+            windowMs: number;
+        };
+    };
+    /** Security settings */
+    security: {
+        allowRootLogin: boolean;
+        hostKeyPolicy: HostKeyPolicy;
+        knownHostsPath: string;
+        allowedCiphers: string[];
+    };
+    /** Policy settings enforced before risky operations */
+    policy: PolicyConfig;
+    /** Remote HTTP transport settings */
+    http: {
+        host: string;
+        port: number;
+        allowedOrigins: string[];
+        bearerTokenFile?: string;
+        enableLegacySse: boolean;
+        maxRequestBodyBytes: number;
+        maxSessions: number;
+        sessionIdleTtlMs: number;
+        publicUrl?: string;
+        trustProxy: boolean;
+    };
+    /** Remote ChatGPT/Claude connector settings */
+    connector: {
+        toolProfile: ToolProfile;
+        credentialProvider: ConnectorCredentialProvider;
+        credentialCommand?: string;
+        credentialCommandArgs: string[];
+        credentialCommandTimeoutMs: number;
+        defaultUsername?: string;
+    };
+    /** HTTP authorization settings for remote MCP clients */
+    auth: {
+        mode: "bearer" | "oauth";
+        oauthIssuer?: string;
+        oauthAudience?: string;
+        oauthJwksUrl?: string;
+        oauthResource?: string;
+        oauthRequiredScopes: string[];
+        oauthAllowedAlgorithms: string[];
+    };
+}
+//# sourceMappingURL=config-types.d.ts.map

package/dist/config-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-types.d.ts","sourceRoot":"","sources":["../src/config-types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,qBAAqB,CAAC;AACvE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEhD;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,kCAAkC;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,0CAA0C;IAC1C,YAAY,EAAE,MAAM,CAAC;IACrB,+CAA+C;IAC/C,iBAAiB,EAAE,MAAM,CAAC;IAC1B,8CAA8C;IAC9C,gBAAgB,EAAE,MAAM,CAAC;IACzB,gEAAgE;IAChE,qBAAqB,EAAE,MAAM,CAAC;IAC9B,kDAAkD;IAClD,eAAe,EAAE,MAAM,CAAC;IACxB,oDAAoD;IACpD,WAAW,EAAE,MAAM,CAAC;IACpB,wEAAwE;IACxE,iBAAiB,EAAE,MAAM,CAAC;IAC1B,yCAAyC;IACzC,gBAAgB,EAAE,MAAM,CAAC;IACzB,2BAA2B;IAC3B,KAAK,EAAE,OAAO,CAAC;IACf,kCAAkC;IAClC,SAAS,EAAE;QACT,OAAO,EAAE,OAAO,CAAC;QACjB,WAAW,EAAE,MAAM,CAAC;QACpB,QAAQ,EAAE,MAAM,CAAC;QACjB,UAAU,EAAE;YACV,OAAO,EAAE,OAAO,CAAC;YACjB,WAAW,EAAE,MAAM,CAAC;YACpB,QAAQ,EAAE,MAAM,CAAC;SAClB,CAAC;KACH,CAAC;IACF,wBAAwB;IACxB,QAAQ,EAAE;QACR,cAAc,EAAE,OAAO,CAAC;QACxB,aAAa,EAAE,aAAa,CAAC;QAC7B,cAAc,EAAE,MAAM,CAAC;QACvB,cAAc,EAAE,MAAM,EAAE,CAAC;KAC1B,CAAC;IACF,uDAAuD;IACvD,MAAM,EAAE,YAAY,CAAC;IACrB,qCAAqC;IACrC,IAAI,EAAE;QACJ,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,cAAc,EAAE,MAAM,EAAE,CAAC;QACzB,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,eAAe,EAAE,OAAO,CAAC;QACzB,mBAAmB,EAAE,MAAM,CAAC;QAC5B,WAAW,EAAE,MAAM,CAAC;QACpB,gBAAgB,EAAE,MAAM,CAAC;QACzB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,UAAU,EAAE,OAAO,CAAC;KACrB,CAAC;IACF,+CAA+C;IAC/C,SAAS,EAAE;QACT,WAAW,EAAE,WAAW,CAAC;QACzB,kBAAkB,EAAE,2BAA2B,CAAC;QAChD,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,qBAAqB,EAAE,MAAM,EAAE,CAAC;QAChC,0BAA0B,EAAE,MAAM,CAAC;QACnC,eAAe,CAAC,EAAE,MAAM,CAAC;KAC1B,CAAC;IACF,yDAAyD;IACzD,IAAI,EAAE;QACJ,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC;QACzB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,mBAAmB,EAAE,MAAM,EAAE,CAAC;QAC9B,sBAAsB,EAAE,MAAM,EAAE,CAAC;KAClC,CAAC;CACH"}

package/dist/config-types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=config-types.js.map

package/dist/config-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-types.js","sourceRoot":"","sources":["../src/config-types.ts"],"names":[],"mappings":""}