just-bash-mcp 1.0.0

package/LICENSE

@@ -0,0 +1,190 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to the Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   Copyright 2025 dalist1
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.md

@@ -0,0 +1,387 @@
+# just-bash-mcp
+
+[![npm version](https://badge.fury.io/js/just-bash-mcp.svg)](https://www.npmjs.com/package/just-bash-mcp)
+[![License: Apache-2.0](https://img.shields.io/badge/License-Apache%202.0-blue.svg)](https://opensource.org/licenses/Apache-2.0)
+
+An MCP (Model Context Protocol) server that provides a sandboxed bash environment using [just-bash](https://github.com/vercel-labs/just-bash).
+
+This server allows AI agents to execute bash commands in a secure, isolated environment with an in-memory virtual filesystem.
+
+## Features
+
+- **Sandboxed Execution**: Commands run in an isolated virtual filesystem
+- **Stateless & Stateful Modes**: Choose between isolated executions or persistent filesystem
+- **Network Access Control**: Optional network access with URL allow-lists
+- **Execution Limits**: Protection against infinite loops and deep recursion
+- **OverlayFS Support**: Mount real directories as read-only with copy-on-write
+
+## Installation
+
+### From npm (recommended)
+
+```bash
+# Using npm
+npm install -g just-bash-mcp
+
+# Using pnpm
+pnpm add -g just-bash-mcp
+
+# Using yarn
+yarn global add just-bash-mcp
+```
+
+### From source
+
+```bash
+git clone https://github.com/dalist1/just-bash-mcp.git
+cd just-bash-mcp
+npm install
+npm run build
+```
+
+## Usage
+
+### Running the Server
+
+```bash
+# If installed globally
+just-bash-mcp
+
+# From source with npm
+npm start
+
+# From source with npm (development)
+npm run dev
+```
+
+## MCP Client Configuration
+
+### Using npx (no installation required)
+
+```json
+{
+  "mcpServers": {
+    "just-bash": {
+      "command": "npx",
+      "args": ["-y", "just-bash-mcp"],
+      "env": {
+        "JUST_BASH_ALLOW_NETWORK": "false"
+      }
+    }
+  }
+}
+```
+
+### Claude Desktop
+
+Add to `~/Library/Application Support/Claude/claude_desktop_config.json` (macOS) or `%APPDATA%\Claude\claude_desktop_config.json` (Windows):
+
+```json
+{
+  "mcpServers": {
+    "just-bash": {
+      "command": "npx",
+      "args": ["-y", "just-bash-mcp"],
+      "env": {
+        "JUST_BASH_ALLOW_NETWORK": "false"
+      }
+    }
+  }
+}
+```
+
+### Cursor
+
+Add to your Cursor MCP settings (Settings → MCP Servers):
+
+```json
+{
+  "mcpServers": {
+    "just-bash": {
+      "command": "npx",
+      "args": ["-y", "just-bash-mcp"],
+      "env": {
+        "JUST_BASH_ALLOW_NETWORK": "false"
+      }
+    }
+  }
+}
+```
+
+### VS Code (Roo Code / Cline)
+
+Add to your MCP settings file:
+- **Roo Code**: `~/.config/Code/User/globalStorage/rooveterinaryinc.roo-code/settings/mcp_settings.json`
+- **Cline**: `~/.config/Code/User/globalStorage/saoudrizwan.claude-dev/settings/cline_mcp_settings.json`
+
+```json
+{
+  "mcpServers": {
+    "just-bash": {
+      "command": "npx",
+      "args": ["-y", "just-bash-mcp"],
+      "env": {
+        "JUST_BASH_ALLOW_NETWORK": "false"
+      }
+    }
+  }
+}
+```
+
+### Windsurf
+
+Add to your Windsurf MCP configuration:
+
+```json
+{
+  "mcpServers": {
+    "just-bash": {
+      "command": "npx",
+      "args": ["-y", "just-bash-mcp"],
+      "env": {
+        "JUST_BASH_ALLOW_NETWORK": "false"
+      }
+    }
+  }
+}
+```
+
+### Using Global Installation
+
+If you've installed globally, you can use the binary directly:
+
+```json
+{
+  "mcpServers": {
+    "just-bash": {
+      "command": "just-bash-mcp",
+      "env": {
+        "JUST_BASH_ALLOW_NETWORK": "false"
+      }
+    }
+  }
+}
+```
+
+### Using Local Installation
+
+For development or local installations:
+
+```json
+{
+  "mcpServers": {
+    "just-bash": {
+      "command": "node",
+      "args": ["/path/to/just-bash-mcp/build/index.js"],
+      "env": {
+        "JUST_BASH_ALLOW_NETWORK": "false"
+      }
+    }
+  }
+}
+```
+
+## Environment Variables
+
+| Variable | Description | Default |
+|----------|-------------|---------|
+| `JUST_BASH_CWD` | Initial working directory | `/home/user` |
+| `JUST_BASH_OVERLAY_ROOT` | Real directory to mount as overlay (read-only) | - |
+| `JUST_BASH_ALLOW_NETWORK` | Enable network access (`true`/`false`) | `false` |
+| `JUST_BASH_ALLOWED_URLS` | Comma-separated URL prefixes to allow | - |
+| `JUST_BASH_ALLOWED_METHODS` | Comma-separated HTTP methods to allow | `GET,HEAD` |
+| `JUST_BASH_MAX_CALL_DEPTH` | Maximum function recursion depth | `100` |
+| `JUST_BASH_MAX_COMMAND_COUNT` | Maximum total commands per execution | `10000` |
+| `JUST_BASH_MAX_LOOP_ITERATIONS` | Maximum iterations per loop | `10000` |
+
+## Tools
+
+### `bash_exec`
+
+Execute a bash command in a sandboxed environment. Each execution is isolated.
+
+**Parameters:**
+- `command` (required): The bash command to execute
+- `cwd` (optional): Working directory for the command
+- `env` (optional): Environment variables to set
+- `files` (optional): Files to create before execution (path → content)
+
+**Example:**
+```json
+{
+  "name": "bash_exec",
+  "arguments": {
+    "command": "echo 'Hello World' && ls -la",
+    "files": {
+      "/tmp/data.json": "{\"key\": \"value\"}"
+    }
+  }
+}
+```
+
+### `bash_exec_persistent`
+
+Execute a bash command in a persistent sandboxed environment. The filesystem persists across calls.
+
+**Parameters:**
+- `command` (required): The bash command to execute
+- `cwd` (optional): Working directory for the command
+- `env` (optional): Environment variables to set
+
+### `bash_reset`
+
+Reset the persistent bash environment, clearing all files and state.
+
+### `bash_write_file`
+
+Write content to a file in the persistent bash environment.
+
+**Parameters:**
+- `path` (required): The file path to write to
+- `content` (required): The content to write
+
+### `bash_read_file`
+
+Read content from a file in the persistent bash environment.
+
+**Parameters:**
+- `path` (required): The file path to read
+
+### `bash_list_files`
+
+List files and directories in the persistent bash environment.
+
+**Parameters:**
+- `path` (optional): Directory path to list (defaults to `.`)
+- `recursive` (optional): Whether to list recursively
+- `showHidden` (optional): Whether to show hidden files
+
+### `bash_info`
+
+Get information about the bash environment configuration.
+
+## Supported Commands
+
+### File Operations
+`cat`, `cp`, `ln`, `ls`, `mkdir`, `mv`, `readlink`, `rm`, `stat`, `touch`, `tree`
+
+### Text Processing
+`awk`, `base64`, `cut`, `diff`, `grep`, `head`, `jq`, `printf`, `sed`, `sort`, `tail`, `tr`, `uniq`, `wc`, `xargs`
+
+### Navigation & Environment
+`basename`, `cd`, `dirname`, `du`, `echo`, `env`, `export`, `find`, `printenv`, `pwd`, `tee`
+
+### Shell Utilities
+`alias`, `bash`, `chmod`, `clear`, `date`, `expr`, `false`, `help`, `history`, `seq`, `sh`, `sleep`, `timeout`, `true`, `unalias`, `which`
+
+### Network Commands (when enabled)
+`curl`, `html-to-markdown`
+
+## Shell Features
+
+- Pipes: `cmd1 | cmd2`
+- Redirections: `>`, `>>`, `2>`, `2>&1`, `<`
+- Command chaining: `&&`, `||`, `;`
+- Variables: `$VAR`, `${VAR}`, `${VAR:-default}`
+- Positional parameters: `$1`, `$2`, `$@`, `$#`
+- Glob patterns: `*`, `?`, `[...]`
+- If statements: `if COND; then CMD; elif COND; then CMD; else CMD; fi`
+- Functions: `function name { ... }` or `name() { ... }`
+- Local variables: `local VAR=value`
+- Loops: `for`, `while`, `until`
+- Symbolic links: `ln -s target link`
+- Hard links: `ln target link`
+
+## Network Access Examples
+
+### Allow specific URLs (safest)
+
+```json
+{
+  "env": {
+    "JUST_BASH_ALLOW_NETWORK": "true",
+    "JUST_BASH_ALLOWED_URLS": "https://api.github.com,https://api.example.com/v1/"
+  }
+}
+```
+
+### Allow specific URLs with POST
+
+```json
+{
+  "env": {
+    "JUST_BASH_ALLOW_NETWORK": "true",
+    "JUST_BASH_ALLOWED_URLS": "https://api.example.com",
+    "JUST_BASH_ALLOWED_METHODS": "GET,HEAD,POST"
+  }
+}
+```
+
+### Full internet access (use with caution)
+
+```json
+{
+  "env": {
+    "JUST_BASH_ALLOW_NETWORK": "true"
+  }
+}
+```
+
+## OverlayFS Example
+
+Mount a real project directory as read-only:
+
+```json
+{
+  "env": {
+    "JUST_BASH_OVERLAY_ROOT": "/path/to/your/project"
+  }
+}
+```
+
+The agent can read files from the real filesystem, but all writes stay in memory.
+
+## Security Model
+
+- The shell only has access to the provided virtual filesystem
+- Execution is protected against infinite loops and deep recursion
+- No binary or WASM execution support
+- Network access is disabled by default
+- When enabled, network requests are checked against URL and HTTP method allow-lists
+
+## Development
+
+```bash
+# Clone the repository
+git clone https://github.com/dalist1/just-bash-mcp.git
+cd just-bash-mcp
+
+# Install dependencies
+npm install
+
+# Run in development mode
+npm run dev
+
+# Type check
+npm run typecheck
+
+# Build for production
+npm run build
+
+# Test the server
+echo '{"jsonrpc":"2.0","id":1,"method":"tools/list"}' | npm run dev
+```
+
+## Publishing
+
+```bash
+# Build the package
+npm run build
+
+# Publish to npm
+npm publish
+```
+
+## License
+
+Apache-2.0 (same as [just-bash](https://github.com/vercel-labs/just-bash))

package/build/index.d.ts

@@ -0,0 +1,9 @@
+#!/usr/bin/env node
+/**
+ * @fileoverview MCP server providing a sandboxed bash environment using just-bash.
+ * @author dalist1
+ * @license Apache-2.0
+ * @see https://github.com/dalist1/just-bash-mcp
+ */
+export {};
+//# sourceMappingURL=index.d.ts.map

package/build/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA;;;;;GAKG"}

package/build/index.js

@@ -0,0 +1,394 @@
+#!/usr/bin/env node
+/**
+ * @fileoverview MCP server providing a sandboxed bash environment using just-bash.
+ * @author dalist1
+ * @license Apache-2.0
+ * @see https://github.com/dalist1/just-bash-mcp
+ */
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { z } from "zod";
+import { Bash, OverlayFs } from "just-bash";
+// ============================================================================
+// Configuration from environment variables
+// ============================================================================
+/** Path to real directory for overlay filesystem (read-only mount) */
+const OVERLAY_ROOT = process.env.JUST_BASH_OVERLAY_ROOT;
+/** Initial working directory for bash environment */
+const INITIAL_CWD = process.env.JUST_BASH_CWD || "/home/user";
+/** Whether network access is enabled */
+const ALLOW_NETWORK = process.env.JUST_BASH_ALLOW_NETWORK === "true";
+/** Comma-separated list of allowed URL prefixes */
+const ALLOWED_URL_PREFIXES = process.env.JUST_BASH_ALLOWED_URLS?.split(",").filter(Boolean) || [];
+/** Allowed HTTP methods for network requests */
+const ALLOWED_METHODS = (process.env.JUST_BASH_ALLOWED_METHODS?.split(",").filter(Boolean) || ["GET", "HEAD"]);
+// ============================================================================
+// Execution limits from environment
+// ============================================================================
+/** Maximum function call/recursion depth */
+const MAX_CALL_DEPTH = parseInt(process.env.JUST_BASH_MAX_CALL_DEPTH || "100", 10);
+/** Maximum number of commands per execution */
+const MAX_COMMAND_COUNT = parseInt(process.env.JUST_BASH_MAX_COMMAND_COUNT || "10000", 10);
+/** Maximum loop iterations */
+const MAX_LOOP_ITERATIONS = parseInt(process.env.JUST_BASH_MAX_LOOP_ITERATIONS || "10000", 10);
+// ============================================================================
+// MCP Server Setup
+// ============================================================================
+/** MCP server instance */
+const server = new McpServer({
+    name: "just-bash-mcp",
+    version: "1.0.0",
+});
+/**
+ * Builds the network configuration based on environment variables.
+ * @returns Network configuration object or undefined if network is disabled
+ */
+function buildNetworkConfig() {
+    if (!ALLOW_NETWORK) {
+        return undefined;
+    }
+    if (ALLOWED_URL_PREFIXES.length > 0) {
+        return {
+            allowedUrlPrefixes: ALLOWED_URL_PREFIXES,
+            allowedMethods: ALLOWED_METHODS,
+        };
+    }
+    // Full internet access if ALLOW_NETWORK is true but no prefixes specified
+    return { dangerouslyAllowFullInternetAccess: true };
+}
+/**
+ * Builds the execution limits configuration.
+ * @returns Execution limits object with all limit values
+ */
+function buildExecutionLimits() {
+    return {
+        maxCallDepth: MAX_CALL_DEPTH,
+        maxCommandCount: MAX_COMMAND_COUNT,
+        maxLoopIterations: MAX_LOOP_ITERATIONS,
+        maxAwkIterations: MAX_LOOP_ITERATIONS,
+        maxSedIterations: MAX_LOOP_ITERATIONS,
+    };
+}
+/**
+ * Creates a new Bash instance with optional overlay filesystem.
+ * @param files - Optional initial files to create in the filesystem
+ * @returns Configured Bash instance
+ */
+function createBashInstance(files) {
+    const networkConfig = buildNetworkConfig();
+    const executionLimits = buildExecutionLimits();
+    if (OVERLAY_ROOT) {
+        const overlay = new OverlayFs({ root: OVERLAY_ROOT });
+        return new Bash({
+            fs: overlay,
+            cwd: overlay.getMountPoint(),
+            network: networkConfig,
+            executionLimits,
+            files,
+        });
+    }
+    return new Bash({
+        cwd: INITIAL_CWD,
+        network: networkConfig,
+        executionLimits,
+        files,
+    });
+}
+// ============================================================================
+// Persistent Bash Instance
+// ============================================================================
+/** Persistent bash instance for stateful operations */
+let persistentBash = null;
+/**
+ * Gets or creates the persistent Bash instance.
+ * @returns The persistent Bash instance
+ */
+function getPersistentBash() {
+    if (!persistentBash) {
+        persistentBash = createBashInstance();
+    }
+    return persistentBash;
+}
+// ============================================================================
+// Tool Definitions
+// ============================================================================
+/**
+ * Tool: bash_exec
+ * Execute a bash command in a sandboxed environment.
+ * Each execution is isolated - environment variables, functions, and cwd don't persist.
+ */
+server.registerTool("bash_exec", {
+    description: "Execute a bash command in a sandboxed environment. Each execution is isolated - environment variables, functions, and cwd don't persist across calls (filesystem does).",
+    inputSchema: {
+        command: z.string().describe("The bash command to execute"),
+        cwd: z.string().optional().describe("Working directory for the command"),
+        env: z.record(z.string(), z.string()).optional().describe("Environment variables to set"),
+        files: z.record(z.string(), z.string()).optional().describe("Files to create before execution (path -> content)"),
+    },
+}, async ({ command, cwd, env, files }) => {
+    try {
+        const bash = createBashInstance(files);
+        const result = await bash.exec(command, { cwd, env });
+        return {
+            content: [
+                {
+                    type: "text",
+                    text: JSON.stringify({
+                        stdout: result.stdout,
+                        stderr: result.stderr,
+                        exitCode: result.exitCode,
+                        env: result.env,
+                    }, null, 2),
+                },
+            ],
+            isError: result.exitCode !== 0,
+        };
+    }
+    catch (error) {
+        return {
+            content: [
+                {
+                    type: "text",
+                    text: `Execution error: ${error instanceof Error ? error.message : String(error)}`,
+                },
+            ],
+            isError: true,
+        };
+    }
+});
+/**
+ * Tool: bash_exec_persistent
+ * Execute a bash command in a persistent sandboxed environment.
+ * The filesystem persists across calls, but env vars, functions, and cwd are reset.
+ */
+server.registerTool("bash_exec_persistent", {
+    description: "Execute a bash command in a persistent sandboxed environment. The filesystem persists across calls, but env vars, functions, and cwd are reset each call.",
+    inputSchema: {
+        command: z.string().describe("The bash command to execute"),
+        cwd: z.string().optional().describe("Working directory for the command"),
+        env: z.record(z.string(), z.string()).optional().describe("Environment variables to set"),
+    },
+}, async ({ command, cwd, env }) => {
+    try {
+        const bash = getPersistentBash();
+        const result = await bash.exec(command, { cwd, env });
+        return {
+            content: [
+                {
+                    type: "text",
+                    text: JSON.stringify({
+                        stdout: result.stdout,
+                        stderr: result.stderr,
+                        exitCode: result.exitCode,
+                        env: result.env,
+                    }, null, 2),
+                },
+            ],
+            isError: result.exitCode !== 0,
+        };
+    }
+    catch (error) {
+        return {
+            content: [
+                {
+                    type: "text",
+                    text: `Execution error: ${error instanceof Error ? error.message : String(error)}`,
+                },
+            ],
+            isError: true,
+        };
+    }
+});
+/**
+ * Tool: bash_reset
+ * Reset the persistent bash environment, clearing all files and state.
+ */
+server.registerTool("bash_reset", {
+    description: "Reset the persistent bash environment, clearing all files and state.",
+    inputSchema: {},
+}, async () => {
+    persistentBash = null;
+    return {
+        content: [
+            {
+                type: "text",
+                text: "Persistent bash environment has been reset.",
+            },
+        ],
+    };
+});
+/**
+ * Tool: bash_write_file
+ * Write content to a file in the persistent bash environment.
+ */
+server.registerTool("bash_write_file", {
+    description: "Write content to a file in the persistent bash environment.",
+    inputSchema: {
+        path: z.string().describe("The file path to write to"),
+        content: z.string().describe("The content to write"),
+    },
+}, async ({ path, content }) => {
+    try {
+        const bash = getPersistentBash();
+        const result = await bash.exec(`cat > '${path}' << 'JUST_BASH_EOF'\n${content}\nJUST_BASH_EOF`);
+        if (result.exitCode !== 0) {
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: `Failed to write file: ${result.stderr}`,
+                    },
+                ],
+                isError: true,
+            };
+        }
+        return {
+            content: [
+                {
+                    type: "text",
+                    text: `Successfully wrote ${content.length} bytes to ${path}`,
+                },
+            ],
+        };
+    }
+    catch (error) {
+        return {
+            content: [
+                {
+                    type: "text",
+                    text: `Write error: ${error instanceof Error ? error.message : String(error)}`,
+                },
+            ],
+            isError: true,
+        };
+    }
+});
+/**
+ * Tool: bash_read_file
+ * Read content from a file in the persistent bash environment.
+ */
+server.registerTool("bash_read_file", {
+    description: "Read content from a file in the persistent bash environment.",
+    inputSchema: {
+        path: z.string().describe("The file path to read"),
+    },
+}, async ({ path }) => {
+    try {
+        const bash = getPersistentBash();
+        const result = await bash.exec(`cat '${path}'`);
+        if (result.exitCode !== 0) {
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: `Failed to read file: ${result.stderr}`,
+                    },
+                ],
+                isError: true,
+            };
+        }
+        return {
+            content: [
+                {
+                    type: "text",
+                    text: result.stdout,
+                },
+            ],
+        };
+    }
+    catch (error) {
+        return {
+            content: [
+                {
+                    type: "text",
+                    text: `Read error: ${error instanceof Error ? error.message : String(error)}`,
+                },
+            ],
+            isError: true,
+        };
+    }
+});
+/**
+ * Tool: bash_list_files
+ * List files and directories in the persistent bash environment.
+ */
+server.registerTool("bash_list_files", {
+    description: "List files and directories in the persistent bash environment.",
+    inputSchema: {
+        path: z.string().optional().describe("The directory path to list (defaults to current directory)"),
+        recursive: z.boolean().optional().describe("Whether to list recursively"),
+        showHidden: z.boolean().optional().describe("Whether to show hidden files"),
+    },
+}, async ({ path = ".", recursive = false, showHidden = false }) => {
+    try {
+        const bash = getPersistentBash();
+        let cmd = "ls -l";
+        if (showHidden)
+            cmd += "a";
+        if (recursive)
+            cmd = `find '${path}' -type f`;
+        else
+            cmd += ` '${path}'`;
+        const result = await bash.exec(cmd);
+        return {
+            content: [
+                {
+                    type: "text",
+                    text: result.stdout || "(empty directory)",
+                },
+            ],
+            isError: result.exitCode !== 0,
+        };
+    }
+    catch (error) {
+        return {
+            content: [
+                {
+                    type: "text",
+                    text: `List error: ${error instanceof Error ? error.message : String(error)}`,
+                },
+            ],
+            isError: true,
+        };
+    }
+});
+/**
+ * Tool: bash_info
+ * Get information about the bash environment configuration.
+ */
+server.registerTool("bash_info", {
+    description: "Get information about the bash environment configuration.",
+    inputSchema: {},
+}, async () => {
+    const info = {
+        overlayRoot: OVERLAY_ROOT || null,
+        initialCwd: INITIAL_CWD,
+        networkEnabled: ALLOW_NETWORK,
+        allowedUrlPrefixes: ALLOWED_URL_PREFIXES.length > 0 ? ALLOWED_URL_PREFIXES : null,
+        allowedMethods: ALLOW_NETWORK ? ALLOWED_METHODS : null,
+        executionLimits: buildExecutionLimits(),
+        supportedCommands: [
+            "File Operations: cat, cp, ln, ls, mkdir, mv, readlink, rm, stat, touch, tree",
+            "Text Processing: awk, base64, cut, diff, grep, head, jq, printf, sed, sort, tail, tr, uniq, wc, xargs",
+            "Navigation & Environment: basename, cd, dirname, du, echo, env, export, find, printenv, pwd, tee",
+            "Shell Utilities: alias, bash, chmod, clear, date, expr, false, help, history, seq, sh, sleep, timeout, true, unalias, which",
+            "Network Commands (if enabled): curl, html-to-markdown",
+        ],
+    };
+    return {
+        content: [
+            {
+                type: "text",
+                text: JSON.stringify(info, null, 2),
+            },
+        ],
+    };
+});
+// ============================================================================
+// Server Startup
+// ============================================================================
+/** Start the MCP server with stdio transport */
+const transport = new StdioServerTransport();
+await server.connect(transport);
+console.error("just-bash-mcp server running on stdio");
+//# sourceMappingURL=index.js.map

package/build/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA;;;;;GAKG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,IAAI,EAAE,SAAS,EAAsB,MAAM,WAAW,CAAC;AAKhE,+EAA+E;AAC/E,2CAA2C;AAC3C,+EAA+E;AAE/E,sEAAsE;AACtE,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;AAExD,qDAAqD;AACrD,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,YAAY,CAAC;AAE9D,wCAAwC;AACxC,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,KAAK,MAAM,CAAC;AAErE,mDAAmD;AACnD,MAAM,oBAAoB,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;AAElG,gDAAgD;AAChD,MAAM,eAAe,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAyB,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAiB,CAAC;AAE/H,+EAA+E;AAC/E,oCAAoC;AACpC,+EAA+E;AAE/E,4CAA4C;AAC5C,MAAM,cAAc,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,KAAK,EAAE,EAAE,CAAC,CAAC;AAEnF,+CAA+C;AAC/C,MAAM,iBAAiB,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,2BAA2B,IAAI,OAAO,EAAE,EAAE,CAAC,CAAC;AAE3F,8BAA8B;AAC9B,MAAM,mBAAmB,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,6BAA6B,IAAI,OAAO,EAAE,EAAE,CAAC,CAAC;AAE/F,+EAA+E;AAC/E,mBAAmB;AACnB,+EAA+E;AAE/E,0BAA0B;AAC1B,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;IAC3B,IAAI,EAAE,eAAe;IACrB,OAAO,EAAE,OAAO;CACjB,CAAC,CAAC;AAEH;;;GAGG;AACH,SAAS,kBAAkB;IACzB,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,oBAAoB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpC,OAAO;YACL,kBAAkB,EAAE,oBAAoB;YACxC,cAAc,EAAE,eAAe;SAChC,CAAC;IACJ,CAAC;IAED,0EAA0E;IAC1E,OAAO,EAAE,kCAAkC,EAAE,IAAI,EAAE,CAAC;AACtD,CAAC;AAED;;;GAGG;AACH,SAAS,oBAAoB;IAC3B,OAAO;QACL,YAAY,EAAE,cAAc;QAC5B,eAAe,EAAE,iBAAiB;QAClC,iBAAiB,EAAE,mBAAmB;QACtC,gBAAgB,EAAE,mBAAmB;QACrC,gBAAgB,EAAE,mBAAmB;KACtC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,kBAAkB,CAAC,KAA8B;IACxD,MAAM,aAAa,GAAG,kBAAkB,EAAE,CAAC;IAC3C,MAAM,eAAe,GAAG,oBAAoB,EAAE,CAAC;IAE/C,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,OAAO,GAAG,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;QACtD,OAAO,IAAI,IAAI,CAAC;YACd,EAAE,EAAE,OAAO;YACX,GAAG,EAAE,OAAO,CAAC,aAAa,EAAE;YAC5B,OAAO,EAAE,aAAa;YACtB,eAAe;YACf,KAAK;SACN,CAAC,CAAC;IACL,CAAC;IAED,OAAO,IAAI,IAAI,CAAC;QACd,GAAG,EAAE,WAAW;QAChB,OAAO,EAAE,aAAa;QACtB,eAAe;QACf,KAAK;KACN,CAAC,CAAC;AACL,CAAC;AAED,+EAA+E;AAC/E,2BAA2B;AAC3B,+EAA+E;AAE/E,uDAAuD;AACvD,IAAI,cAAc,GAAgB,IAAI,CAAC;AAEvC;;;GAGG;AACH,SAAS,iBAAiB;IACxB,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,cAAc,GAAG,kBAAkB,EAAE,CAAC;IACxC,CAAC;IACD,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,+EAA+E;AAC/E,mBAAmB;AACnB,+EAA+E;AAE/E;;;;GAIG;AACH,MAAM,CAAC,YAAY,CACjB,WAAW,EACX;IACE,WAAW,EAAE,yKAAyK;IACtL,WAAW,EAAE;QACX,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,6BAA6B,CAAC;QAC3D,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC;QACxE,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;QACzF,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oDAAoD,CAAC;KAClH;CACF,EACD,KAAK,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE;IACrC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;QAEtD,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAClB;wBACE,MAAM,EAAE,MAAM,CAAC,MAAM;wBACrB,MAAM,EAAE,MAAM,CAAC,MAAM;wBACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;wBACzB,GAAG,EAAE,MAAM,CAAC,GAAG;qBAChB,EACD,IAAI,EACJ,CAAC,CACF;iBACF;aACF;YACD,OAAO,EAAE,MAAM,CAAC,QAAQ,KAAK,CAAC;SAC/B,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,oBAAoB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;iBACnF;aACF;YACD,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;AACH,CAAC,CACF,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,YAAY,CACjB,sBAAsB,EACtB;IACE,WAAW,EAAE,2JAA2J;IACxK,WAAW,EAAE;QACX,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,6BAA6B,CAAC;QAC3D,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC;QACxE,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;KAC1F;CACF,EACD,KAAK,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE;IAC9B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,iBAAiB,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;QAEtD,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAClB;wBACE,MAAM,EAAE,MAAM,CAAC,MAAM;wBACrB,MAAM,EAAE,MAAM,CAAC,MAAM;wBACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;wBACzB,GAAG,EAAE,MAAM,CAAC,GAAG;qBAChB,EACD,IAAI,EACJ,CAAC,CACF;iBACF;aACF;YACD,OAAO,EAAE,MAAM,CAAC,QAAQ,KAAK,CAAC;SAC/B,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,oBAAoB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;iBACnF;aACF;YACD,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;AACH,CAAC,CACF,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,YAAY,CACjB,YAAY,EACZ;IACE,WAAW,EAAE,sEAAsE;IACnF,WAAW,EAAE,EAAE;CAChB,EACD,KAAK,IAAI,EAAE;IACT,cAAc,GAAG,IAAI,CAAC;IACtB,OAAO;QACL,OAAO,EAAE;YACP;gBACE,IAAI,EAAE,MAAe;gBACrB,IAAI,EAAE,6CAA6C;aACpD;SACF;KACF,CAAC;AACJ,CAAC,CACF,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,YAAY,CACjB,iBAAiB,EACjB;IACE,WAAW,EAAE,6DAA6D;IAC1E,WAAW,EAAE;QACX,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC;QACtD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,sBAAsB,CAAC;KACrD;CACF,EACD,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;IAC1B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,iBAAiB,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,yBAAyB,OAAO,iBAAiB,CAAC,CAAC;QAEhG,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,yBAAyB,MAAM,CAAC,MAAM,EAAE;qBAC/C;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,sBAAsB,OAAO,CAAC,MAAM,aAAa,IAAI,EAAE;iBAC9D;aACF;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,gBAAgB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;iBAC/E;aACF;YACD,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;AACH,CAAC,CACF,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,YAAY,CACjB,gBAAgB,EAChB;IACE,WAAW,EAAE,8DAA8D;IAC3E,WAAW,EAAE;QACX,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uBAAuB,CAAC;KACnD;CACF,EACD,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;IACjB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,iBAAiB,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,GAAG,CAAC,CAAC;QAEhD,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,wBAAwB,MAAM,CAAC,MAAM,EAAE;qBAC9C;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,MAAM,CAAC,MAAM;iBACpB;aACF;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,eAAe,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;iBAC9E;aACF;YACD,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;AACH,CAAC,CACF,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,YAAY,CACjB,iBAAiB,EACjB;IACE,WAAW,EAAE,gEAAgE;IAC7E,WAAW,EAAE;QACX,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4DAA4D,CAAC;QAClG,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6BAA6B,CAAC;QACzE,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;KAC5E;CACF,EACD,KAAK,EAAE,EAAE,IAAI,GAAG,GAAG,EAAE,SAAS,GAAG,KAAK,EAAE,UAAU,GAAG,KAAK,EAAE,EAAE,EAAE;IAC9D,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,iBAAiB,EAAE,CAAC;QACjC,IAAI,GAAG,GAAG,OAAO,CAAC;QAClB,IAAI,UAAU;YAAE,GAAG,IAAI,GAAG,CAAC;QAC3B,IAAI,SAAS;YAAE,GAAG,GAAG,SAAS,IAAI,WAAW,CAAC;;YACzC,GAAG,IAAI,KAAK,IAAI,GAAG,CAAC;QAEzB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAEpC,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,MAAM,CAAC,MAAM,IAAI,mBAAmB;iBAC3C;aACF;YACD,OAAO,EAAE,MAAM,CAAC,QAAQ,KAAK,CAAC;SAC/B,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,eAAe,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;iBAC9E;aACF;YACD,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;AACH,CAAC,CACF,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,YAAY,CACjB,WAAW,EACX;IACE,WAAW,EAAE,2DAA2D;IACxE,WAAW,EAAE,EAAE;CAChB,EACD,KAAK,IAAI,EAAE;IACT,MAAM,IAAI,GAAG;QACX,WAAW,EAAE,YAAY,IAAI,IAAI;QACjC,UAAU,EAAE,WAAW;QACvB,cAAc,EAAE,aAAa;QAC7B,kBAAkB,EAAE,oBAAoB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,IAAI;QACjF,cAAc,EAAE,aAAa,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI;QACtD,eAAe,EAAE,oBAAoB,EAAE;QACvC,iBAAiB,EAAE;YACjB,8EAA8E;YAC9E,uGAAuG;YACvG,kGAAkG;YAClG,6HAA6H;YAC7H,uDAAuD;SACxD;KACF,CAAC;IAEF,OAAO;QACL,OAAO,EAAE;YACP;gBACE,IAAI,EAAE,MAAe;gBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;aACpC;SACF;KACF,CAAC;AACJ,CAAC,CACF,CAAC;AAEF,+EAA+E;AAC/E,iBAAiB;AACjB,+EAA+E;AAE/E,gDAAgD;AAChD,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;AAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;AAChC,OAAO,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC"}

package/package.json

@@ -0,0 +1,65 @@
+{
+  "name": "just-bash-mcp",
+  "version": "1.0.0",
+  "description": "MCP server providing a sandboxed bash environment using just-bash",
+  "type": "module",
+  "main": "./build/index.js",
+  "types": "./build/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./build/index.d.ts",
+      "import": "./build/index.js"
+    }
+  },
+  "bin": {
+    "just-bash-mcp": "build/index.js"
+  },
+  "files": [
+    "build",
+    "README.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "start": "node build/index.js",
+    "dev": "npx tsx src/index.ts",
+    "typecheck": "tsc --noEmit",
+    "prepublishOnly": "npm run build"
+  },
+  "keywords": [
+    "mcp",
+    "model-context-protocol",
+    "bash",
+    "sandbox",
+    "shell",
+    "ai",
+    "agent",
+    "claude",
+    "cursor",
+    "cline",
+    "roo-code",
+    "windsurf"
+  ],
+  "author": "dalist1",
+  "license": "Apache-2.0",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/dalist1/just-bash-mcp.git"
+  },
+  "bugs": {
+    "url": "https://github.com/dalist1/just-bash-mcp/issues"
+  },
+  "homepage": "https://github.com/dalist1/just-bash-mcp#readme",
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.25.1",
+    "just-bash": "^1.0.1",
+    "zod": "^4.2.1"
+  },
+  "devDependencies": {
+    "@types/node": "^25.0.3",
+    "typescript": "^5.9.3"
+  }
+}