ssh-mcp 2.0.1 → 2.0.3

package/README.md

@@ -2,6 +2,8 @@
 
 [![NPM Version](https://img.shields.io/npm/v/ssh-mcp)](https://www.npmjs.com/package/ssh-mcp)
 [![Downloads](https://img.shields.io/npm/dm/ssh-mcp)](https://www.npmjs.com/package/ssh-mcp)
+[![CI](https://github.com/tufantunc/ssh-mcp/actions/workflows/ci.yml/badge.svg?branch=main)](https://github.com/tufantunc/ssh-mcp/actions/workflows/ci.yml)
+[![codecov](https://codecov.io/gh/tufantunc/ssh-mcp/branch/main/graph/badge.svg)](https://codecov.io/gh/tufantunc/ssh-mcp)
 [![License](https://img.shields.io/github/license/tufantunc/ssh-mcp)](./LICENSE)
 [![GitHub issues](https://img.shields.io/github/issues/tufantunc/ssh-mcp)](https://github.com/tufantunc/ssh-mcp/issues)
 

package/build/config/loader.js

@@ -91,6 +91,16 @@ function normalizeConfig(raw) {
 export function getProfile(config, name) {
     const targetName = name || config.defaults.defaultProfile;
     if (!targetName) {
+        // Falling back to profiles[0] meant that with several hosts configured and
+        // no default chosen, a command with no profile argument ran against
+        // whichever host happened to be listed first — silently, and typically the
+        // one written down first, which tends to be production. One profile is
+        // unambiguous; more than one is a question the caller has to answer.
+        if (config.profiles.length > 1) {
+            const names = config.profiles.map((p) => p.name).join(', ');
+            throw new Error(`No profile selected and no default configured, but ${config.profiles.length} profiles exist: ${names}. ` +
+                `Pass a "profile" argument, or set defaults.defaultProfile in the config.`);
+        }
         return config.profiles[0];
     }
     const profile = config.profiles.find((p) => p.name === targetName);

package/build/ssh/connection.js

@@ -28,12 +28,25 @@ export class SSHConnection {
         this.sessions = new SessionManager({
             // Live read: the profile object can be replaced after construction.
             profile: () => this.profile,
-            openShell: () => new Promise((resolve, reject) => {
-                this.getClient().shell({ term: 'xterm-256color', cols: 200, rows: 50 }, (err, stream) => (err ? reject(err) : resolve(stream)));
-            }),
-            openExec: (command) => new Promise((resolve, reject) => {
-                this.getClient().exec(this.applyWorkdir(command), (err, stream) => (err ? reject(err) : resolve(stream)));
-            }),
+            // ensureConnected inside the callback, not just before the retry: these
+            // run under openWithRetry, and Dropbear drops the whole connection under
+            // channel churn rather than merely refusing the channel. openSession does
+            // check the link first, but the link can die between that check and the
+            // channel opening — and then every retry reached getClient() on a dead
+            // client and threw the same "SSH connection not established", so the retry
+            // re-ran a corpse three times. SftpClient already did it this way.
+            openShell: async () => {
+                await this.ensureConnected();
+                return new Promise((resolve, reject) => {
+                    this.getClient().shell({ term: 'xterm-256color', cols: 200, rows: 50 }, (err, stream) => (err ? reject(err) : resolve(stream)));
+                });
+            },
+            openExec: async (command) => {
+                await this.ensureConnected();
+                return new Promise((resolve, reject) => {
+                    this.getClient().exec(this.applyWorkdir(command), (err, stream) => (err ? reject(err) : resolve(stream)));
+                });
+            },
             onChannelOpened: () => { this.activeChannels++; },
             onChannelClosed: () => { this.activeChannels--; },
         });

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "ssh-mcp",
   "license": "MIT",
-  "version": "2.0.1",
+  "version": "2.0.3",
   "description": "MCP server exposing policy-gated, audited SSH access for Linux and Windows hosts via the Model Context Protocol.",
   "type": "module",
   "bin": {
@@ -43,6 +43,7 @@
     "@changesets/cli": "^2.31.0",
     "@types/node": "^24.5.2",
     "@types/ssh2": "^1.15.5",
+    "@vitest/coverage-v8": "^3.2.7",
     "cross-env": "^7.0.3",
     "fast-check": "^3.23.2",
     "shx": "^0.4.0",