@poe-platform/safe-bash 0.1.40 → 0.1.42

package/README.md

@@ -121,7 +121,7 @@ These plugins are separate from `agentCommands()`; pass them to `shell.use(...)`
 
 | Command | Plugin and configuration |
 | --- | --- |
-| `curl` | `networkCommands({ authorize, transport?, limits?, replace? })`: required authorization on every request, redirect, and retry. The default transport makes real HTTP(S) requests; inject `transport` for mocks. [Options and limits](src/commands/network/types.ts). |
+| `curl` | `networkCommands({ authorize, transport?, limits?, replace? })`: required authorization on every request, redirect, and retry. Node uses the native HTTP transport; Workers can inject `createFetchTransport()`. `createOriginAuthorizer([...])` provides exact origin/hostname policy; its omitted allowlist is deliberately `*` (allow all). [Options and limits](src/commands/network/types.ts). |
 | `node` | `nodeCommands({ runtime, limits?, replace? })`: runs JavaScript with an injected SafeJS runtime, virtual files, and shell streams. [Usage and supported subset](src/commands/node/README.md). |
 | `safejs` | `safeJsCommands({ runtime, limits?, replace? })`: inject `run`, `createBudget`, `makeFsModule`, and `declareHostOperation` to execute programs. [Runtime contract](src/commands/safejs/types.ts). |
 
@@ -177,6 +177,40 @@ package/local-module loading, `process.exit()`, or native module fallback.
 Pass `limits` for source/input/output bytes, timeout, and interpreter budgets;
 see [defaults and configuration](src/commands/node/README.md#configuration).
 
+## Wire an individual MCP tool
+
+There is no generic safe-bash MCP server. Define each server and tool around the
+specific operation it grants, then call `Shell.exec()` with fixed shell source.
+For example, this server exposes name normalization without accepting arbitrary
+Bash from the MCP client:
+
+```ts
+import { Shell, agentCommands, createMemoryFileSystem } from "poe-code/safe-bash";
+import { createServer, defineSchema } from "tiny-stdio-mcp-server";
+
+const shell = new Shell({ fs: createMemoryFileSystem() }).use(agentCommands());
+const input = defineSchema({ names: { type: "string" } });
+
+const server = createServer({ name: "contacts-tools", version: "1.0.0" })
+  .tool("normalize_names", "Sort and deduplicate newline-separated names", input,
+    async ({ names }) => {
+      const result = await shell.exec("sort | uniq", { stdin: names });
+      if (result.exitCode !== 0) throw new Error(result.stderr);
+      return result.stdout;
+    });
+
+try {
+  await server.listen();
+} finally {
+  await shell.dispose();
+}
+```
+
+Install `poe-code` and the MCP transport package in that server's own project.
+Choose its filesystem, command bundle, limits, and opt-in capabilities there;
+do not expose caller-supplied shell source unless arbitrary shell execution is
+the deliberate API.
+
 ## Add a command
 
 A `CommandDefinition` has a name and an `execute(context)` handler. This example
@@ -237,7 +271,7 @@ For SafeJS host integration, `makeSafeJsShellModule` exposes shell execution and
 | --- | --- |
 | `fs` | Required filesystem; no implicit host access. |
 | `cwd` | Initial virtual directory; defaults to `/`. |
-| `env` | Initial exported variables; defaults to an empty map, with `PWD` set from `cwd`. No host environment inheritance. |
+| `env` | Initial exported variables; defaults to an empty map, with `PWD` set from `cwd`. No host environment inheritance. Never pass host `process.env` or any secret-bearing object: everything in `env` is readable by executed scripts (`env`, `printenv`, `$VAR`), and on Cloudflare Workers with `nodejs_compat` `process.env` contains the Worker's secret bindings. The shell logs a warning when it detects this. |
 | `commands` | Existing `CommandRegistry`; defaults to an empty registry. |
 | `limits` | Resource limits listed below. |
 
@@ -255,10 +289,19 @@ provided. Pass an `AbortSignal` as `signal` to cancel. [Option types](src/shell/
 | `maxSourceBytes` | 1 MiB |
 | `maxExpansionFields` | 10,000 |
 | `maxExpansionBytes` | 16 MiB |
+| `maxWallClockMs` | 30 seconds |
+| `maxCpuMs` | 30 seconds, checked at command and cooperative-yield checkpoints |
 | `pipeHighWaterMark` | 64 KiB |
 
 Always call `dispose()` when finished. Shell failures normally produce an exit
 code and stderr; limit violations, cancellation, and host failures can reject `exec()`.
+For Cloudflare Workers, start with the exported `cloudflareWorkerLimits` profile
+and configure command-family buffers at no more than 8 MiB. Create a separate
+`Shell`, environment object, and quota-wrapped filesystem view for each tenant or
+request. Never reuse tenant state across requests; import `withFileSystemQuota`
+from `poe-code/safe-fs` to bound cumulative writes, including command-initiated
+copies and streaming output. Admission control and rate limiting remain host
+responsibilities.
 
 ### Command configuration
 

package/dist/safe-bash/browser.d.ts

@@ -5,6 +5,11 @@ export * from "./fs/memory/index.js";
 export * from "./fs/readonly/index.js";
 export * from "./fs/mount/index.js";
 export * from "./fs/overlay/index.js";
+export { createFetchTransport } from "./commands/network/fetch-transport.js";
+export type { FetchTransportOptions } from "./commands/network/fetch-transport.js";
+export { createOriginAuthorizer } from "./commands/network/authorizer.js";
+export type { OriginAllowlist, OriginAuthorizerOptions } from "./commands/network/authorizer.js";
+export { cloudflareWorkerNetworkLimits } from "./commands/network/types.js";
 export interface BrowserCommandsOptions {
     readonly replace?: boolean;
 }

package/dist/safe-bash/browser.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"browser.d.ts","sourceRoot":"","sources":["../src/browser.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAOlF,cAAc,sBAAsB,CAAC;AACrC,cAAc,kBAAkB,CAAC;AACjC,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC;AACvC,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AAEtC,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,wBAAgB,qBAAqB,IAAI,SAAS,iBAAiB,EAAE,CAKpE;AAED,wBAAgB,eAAe,CAAC,OAAO,GAAE,sBAA2B,GAAG,kBAAkB,CAaxF"}
+{"version":3,"file":"browser.d.ts","sourceRoot":"","sources":["../src/browser.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAOlF,cAAc,sBAAsB,CAAC;AACrC,cAAc,kBAAkB,CAAC;AACjC,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC;AACvC,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAC7E,YAAY,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AACnF,OAAO,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAC1E,YAAY,EAAE,eAAe,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AACjG,OAAO,EAAE,6BAA6B,EAAE,MAAM,6BAA6B,CAAC;AAE5E,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,wBAAgB,qBAAqB,IAAI,SAAS,iBAAiB,EAAE,CAKpE;AAED,wBAAgB,eAAe,CAAC,OAAO,GAAE,sBAA2B,GAAG,kBAAkB,CAaxF"}