Skip to content

kastelldev/kastell

v1.13.0 Feature

This release adds 4 notable features for engineering teams evaluating rollout.

Published 2mo Server & OS Management
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

automation cli coolify devops digitalocean docker
+10 more
dokploy hetzner linode mcp security-audit self-hosted server-management typescript vps vultr

Affected surfaces

auth breaking_upgrade

Summary

AI summary

Added Claude Code Plugin and four new skills with two agents, plus multiple hooks and dynamic content injection.

Full changelog

Added

  • Claude Code Plugin — kastell-plugin/ marketplace-ready package with plugin.json manifest, .mcp.json, and hooks.json
  • 4 Skills — kastell-ops (background server management), kastell-research (Explore agent + architecture map), kastell-careful (skill-scoped LLM prompt hook), kastell-scaffold (4 fork-friendly templates)
  • 2 Agents — kastell-auditor (security review) and kastell-fixer (bug diagnosis) project-scope agents
  • 5 Hooks — session-log, stop-quality-check, session-audit, pre-commit-audit-guard, destroy-block with ESM-compatible .cjs scripts
  • MCP Discoverability — server.instructions, MCP Logging, llms.txt, SUBMISSIONS.md, 4 platform setup guides, mcp-server keyword
  • Dynamic Content Injection — !command syntax in 4 skill files for live codebase context

Fixed

  • CLI↔MCP parity — 3 bugs fixed: logs default service (Dokploy), health host-key-mismatch detection, maintain update validation
  • DO Coolify SSH key loss — Re-inject SSH public key after platform installer in cloud-init
  • Docker crash after lock — SSH host key resolution in MCP health checks
  • Plugin hook ESM compatibility — Renamed .js → .cjs for ESM project compatibility

Changed

  • Commands→Core extraction — backup, status, update business logic moved from commands/ to core/ (thin command pattern)
  • Adapter bypass elimination — 9 commands now use adapter properties (port, defaultLogService, platformPorts) instead of hardcoded values
  • Shared createMockAdapter() — Test mock factory in tests/helpers/mockAdapter.ts; deduplicated across all test files
  • Test coverage — 4156→4178 tests (adapter contract, core extraction, hook tests)
View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track kastelldev/kastell

Get notified when new releases ship.

Sign up free

About kastelldev/kastell

Server security auditing and hardening toolkit. 413 security checks across 29 categories (SSH, Firewall, Docker, TLS, HTTP Headers), CIS/PCI-DSS/HIPAA compliance mapping, 19-step production hardening, fleet management, and forensic evidence collection. Supports Hetzner, DigitalOcean, Vultr, and Linode. 13 MCP tools.

All releases →

Related context

Beta — feedback welcome: [email protected]