sshm v0.7.0

Highlights

Interactive server management

• sshm list / sshm ls now opens a keyboard-driven server manager in a TTY.
• Select a host with the arrow keys, then connect, inspect, test reachability, add or edit descriptions, change the remote password in a direct PTY, set the default host, create hosts, or delete with confirmation.
• --plain keeps deterministic table output for scripts, pipes, and AI tooling.

AI-safe host discovery

• Servers now have first-class description, group, and tags metadata.
• The new read-only find_servers MCP tool ranks hosts by intent without exposing private notes.
• AI-visible metadata is bounded and rejects credential-like content; --redacted provides share-safe JSON.

Safer destructive and credential operations

• CLI deletion requires typing the exact alias unless --yes is explicitly supplied.
• MCP deletion requires an exact confirm_alias, is audited, and refuses to remove hosts referenced by project profiles.
• Remote password changes run directly inside an SSH PTY. Password bytes never enter MCP payloads, config files, audit logs, or chat.
• Terminal rendering strips control sequences to reduce terminal-output injection risks.

Project profiles and remote workflows (included since v0.5.1)

• Version-3 project profiles capture the server, local root, remote workspace/run root, artifact path, shell, build command, and verification command.
• New MCP tools: list_projects, get_project, upsert_project, and exec_project.
• Detached jobs and tail_logs now work across POSIX and Windows remotes.
• The bundled sshm skill adds lower-token project workflows plus authorized remote reverse/dynamic-debug guidance.

Compatibility

• Existing version-2 configuration files load without implicit migration and upgrade only when saved.
• Existing server-only CLI and MCP tool names remain available.

Release artifacts

• macOS: amd64, arm64
• Linux: amd64, arm64
• Windows: amd64, arm64
• checksums.txt contains SHA-256 checksums for every archive.

Full details: CHANGELOG.md