v2.0.0-alpha

What's new

• Multi-host support: define multiple SSH targets in config, route tool calls by host name
• Prompt injection guard: scans tool output for XML tool tags, authority tags, instruction override phrases, and role
  hijacking patterns before returning to Claude
• Safeguards: allow_overwrite gate on file writes, destructive command gate on exec
• Shell injection fix: env variable key names now validated

In progress

• Port forwarding (ssh_port_forward, ssh_kill_forward, ssh_list_forwards)
• Multi-host CLI polish

Known limitations

• Prompt injection guard is heuristic-based; not a guarantee