feat(mcp): stdio MCP server, Windows CI, keychain DX — release v0.7.0 - #57
Merged
Conversation
2 tasks
… v0.7.0 - Add 'sshx mcp': stdio Model Context Protocol server on the official go-sdk; 7 tools map 1:1 to the CLI execution contract, every call re-enters sshx as a one-shot audited child process (entry=mcp), password management is never exposed - Emit machine-readable sshx.hosts.v1 from --host-list --json - Add windows-latest unit-test/build job to CI - Add make test-keychain-macos + scripts/macos-dev-keychain.sh for prompt-free real-keyring E2E on macOS - Add keyringstore unit coverage (system + sshx_e2e backends) - Add CONTRIBUTING.md; correct coverage badge (48.4% measured) and SECURITY.md supported-versions table; document the release-time SECURITY.md bump in RELEASE.md - Revise AGENT.md/roadmap non-goals: stdio MCP in scope, HTTP/SSE and resident services remain out Closes #47, closes #48, closes #49, closes #50, closes #51 Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
jamiesun
force-pushed
the
release-v0.7.0
branch
from
August 16, 2026 05:27
300fcbf to
be25243
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Implements the improvement plan from the third-party review session.
Added
sshx mcpstdio MCP server (feat(mcp): addsshx mcpstdio server exposing the execution contract #51): officialmodelcontextprotocol/go-sdk; 7 tools (sshx_run/sql/apply/inspect/sftp/transfer/host_list) map 1:1 to the CLI execution contract; every tool call re-enters sshx as a one-shot child process; audit events carryentry=mcp; password management is never exposed; force requires explicitbypass_reason--host-list --jsonnow emits versionedsshx.hosts.v1JSONmake test-keychain-macos+scripts/macos-dev-keychain.sh— prompt-free real-keyring E2E on macOS (dx(macos): frictionless Keychain testing — ephemeral keychain make target + stable codesign identity #47)internal/keyringstoreunit coverage, both build modes (test(keyringstore): add unit coverage for system and e2e backends #49)CONTRIBUTING.md(chore: CONTRIBUTING guide, good-first-issues, and client.go decomposition #53, part)Fixed
Docs
docs/mcp.md; README/README_CN sections; acceptance-matrix row for the MCP surfaceVerification
golangci-lint run ./...— 0 issues; MCP E2E race-cleanGOOS=windows/GOOS=linuxbuilds pass;go.modstays at 1.25.13Closes #47, closes #48, closes #49, closes #50, closes #51
Prepares release v0.7.0 (CHANGELOG dated, SECURITY.md bumped to 0.7.x/0.6.x).
Co-authored-by: Copilot App 223556219+Copilot@users.noreply.github.com