ptyctl

The server uses `portable-pty` to wrap the system's OpenSSH client. The `ssh_options.extra_args` parameter in `ptyctl_session` allows passing arbitrary arguments to the underlying `ssh` command, which could be a vector for exploitation if an untrusted client or an exploited LLM provides malicious arguments (e.g., `LocalCommand` directives in `ssh_config`). However, arguments are passed as a `Vec<String>`, mitigating simple shell injection within individual arguments. Temporary files for private keys are handled with correct permissions (0o600). HTTP transport includes bearer token authentication. The control socket is local and read-only by default. Overall, it's robust, but usage with untrusted inputs for `extra_args` requires caution.