server-watcher

server-watcher (binary sw) is ssh-config-driven server infrastructure management for a single operator. It reads the user's ~/.ssh/config, keeps a host catalog in SQLite, probes and collects metrics through the system ssh binary, and exposes the fleet three ways: a local web dashboard with an in-browser terminal (sw serve / sw ui), a REST API, and a stdio MCP server for LLM agents (sw mcp).

What is documented here

• Architecture — the design document: workspace layout (eight crates), run modes, the system-ssh reuse decision, the localhost trust model, storage, the write-path overview, and the frontend/desktop shell.

• Design Intent Review — a conformance review of the implementation against every intent claim in the architecture document, with evidence, performed after Phase 6 completion.

• Write Path and Audit Contracts — the round-2 mutation surface: bidirectional ssh-config editing (stanza splicing, diff preview, optimistic concurrency, atomic writes), SSH key management (scan/generate/delete/deploy), the audit log rules, the stale-host purge policy, and the MCP tool surface.

• Alerting Contracts — the transition rule (fire once, not every cycle), what raises and clears each condition, the macOS and webhook channels, and the threshold configuration surface.

• Assistant Contracts (BYOK) — the operator's own LLM key: two wire protocols with vendors as presets, what context each assistant may see, why a suggested command waits for a keystroke, and how a fleet plan becomes an approved fan-out.

Key properties