just-bash-mcp 2.9.5 → 3.0.0

package/src/tools/file-tools.ts

@@ -3,204 +3,111 @@
  * Tools for reading, writing, and listing files in the bash environment
  */
 
-import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
-import { z } from "zod/v4";
-import { config } from "../config/index.ts";
-import { createErrorResponse, createSuccessResponse, truncateOutput } from "../utils/index.ts";
-import { getPersistentBash } from "./bash-instance.ts";
+import type {McpServer} from '@modelcontextprotocol/sdk/server/mcp.js'
+import {z} from 'zod/v4'
+import {config} from '../config/index.ts'
+import {createErrorResponse, createSuccessResponse, truncateOutput} from '../utils/index.ts'
+import {getPersistentBash} from './bash-instance.ts'
 
 /**
  * Register file operation tools with the MCP server
  */
 export function registerFileTools(server: McpServer): void {
-	// ========================================================================
-	// bash_write_file - Write file via shell
-	// ========================================================================
-	server.registerTool(
-		"bash_write_file",
-		{
-			description: "Write content to a file in the persistent bash environment.",
-			inputSchema: {
-				path: z.string().describe("The file path to write to"),
-				content: z.string().describe("The content to write"),
-			},
-		},
-		async ({ path, content }: { path: string; content: string }) => {
-			try {
-				const bash = getPersistentBash();
-				const escapedContent = content.replace(/'/g, "'\\''");
-				const result = await bash.exec(
-					`mkdir -p "$(dirname '${path}')" && cat > '${path}' << 'JUST_BASH_EOF'\n${escapedContent}\nJUST_BASH_EOF`,
-				);
+ // ========================================================================
+ // bash_write_file - Write file via shell
+ // ========================================================================
+ server.registerTool('bash_write_file', {description: 'Write content to a file in the persistent bash environment.', inputSchema: {path: z.string().describe('The file path to write to'), content: z.string().describe('The content to write')}}, async ({path, content}: {path: string; content: string}) => {
+  try {
+   const bash = getPersistentBash()
+   const escapedContent = content.replace(/'/g, "'\\''")
+   const result = await bash.exec(`mkdir -p "$(dirname '${path}')" && cat > '${path}' << 'JUST_BASH_EOF'\n${escapedContent}\nJUST_BASH_EOF`)
 
-				if (result.exitCode !== 0) {
-					return {
-						content: [
-							{
-								type: "text" as const,
-								text: `Failed to write file: ${result.stderr}`,
-							},
-						],
-						isError: true,
-					};
-				}
+   if (result.exitCode !== 0) {
+    return {content: [{type: 'text' as const, text: `Failed to write file: ${result.stderr}`}], isError: true}
+   }
 
-				return createSuccessResponse(`Successfully wrote ${content.length} bytes to ${path}`);
-			} catch (error) {
-				return createErrorResponse(error, "Write error");
-			}
-		},
-	);
+   return createSuccessResponse(`Successfully wrote ${content.length} bytes to ${path}`)
+  } catch (error) {
+   return createErrorResponse(error, 'Write error')
+  }
+ })
 
-	// ========================================================================
-	// bash_read_file - Read file via shell
-	// ========================================================================
-	server.registerTool(
-		"bash_read_file",
-		{
-			description: "Read content from a file in the persistent bash environment.",
-			inputSchema: {
-				path: z.string().describe("The file path to read"),
-			},
-		},
-		async ({ path }: { path: string }) => {
-			try {
-				const bash = getPersistentBash();
-				const result = await bash.exec(`cat '${path}'`);
+ // ========================================================================
+ // bash_read_file - Read file via shell
+ // ========================================================================
+ server.registerTool('bash_read_file', {description: 'Read content from a file in the persistent bash environment.', inputSchema: {path: z.string().describe('The file path to read')}}, async ({path}: {path: string}) => {
+  try {
+   const bash = getPersistentBash()
+   const result = await bash.exec(`cat '${path}'`)
 
-				if (result.exitCode !== 0) {
-					return {
-						content: [
-							{
-								type: "text" as const,
-								text: `Failed to read file: ${result.stderr}`,
-							},
-						],
-						isError: true,
-					};
-				}
+   if (result.exitCode !== 0) {
+    return {content: [{type: 'text' as const, text: `Failed to read file: ${result.stderr}`}], isError: true}
+   }
 
-				return {
-					content: [
-						{
-							type: "text" as const,
-							text: truncateOutput(result.stdout, config.MAX_OUTPUT_LENGTH, "stdout"),
-						},
-					],
-				};
-			} catch (error) {
-				return createErrorResponse(error, "Read error");
-			}
-		},
-	);
+   return {content: [{type: 'text' as const, text: truncateOutput(result.stdout, config.MAX_OUTPUT_LENGTH, 'stdout')}]}
+  } catch (error) {
+   return createErrorResponse(error, 'Read error')
+  }
+ })
 
-	// ========================================================================
-	// bash_list_files - List files
-	// ========================================================================
-	server.registerTool(
-		"bash_list_files",
-		{
-			description: "List files and directories in the persistent bash environment.",
-			inputSchema: {
-				path: z
-					.string()
-					.optional()
-					.describe("The directory path to list (defaults to current directory)"),
-				recursive: z.boolean().optional().describe("Whether to list recursively"),
-				showHidden: z.boolean().optional().describe("Whether to show hidden files"),
-			},
-		},
-		async ({
-			path = ".",
-			recursive = false,
-			showHidden = false,
-		}: {
-			path?: string;
-			recursive?: boolean;
-			showHidden?: boolean;
-		}) => {
-			try {
-				const bash = getPersistentBash();
-				let cmd: string;
+ // ========================================================================
+ // bash_list_files - List files
+ // ========================================================================
+ server.registerTool(
+  'bash_list_files',
+  {
+   description: 'List files and directories in the persistent bash environment.',
+   inputSchema: {path: z.string().optional().describe('The directory path to list (defaults to current directory)'), recursive: z.boolean().optional().describe('Whether to list recursively'), showHidden: z.boolean().optional().describe('Whether to show hidden files')}
+  },
+  async ({path = '.', recursive = false, showHidden = false}: {path?: string; recursive?: boolean; showHidden?: boolean}) => {
+   try {
+    const bash = getPersistentBash()
+    let cmd: string
 
-				if (recursive) {
-					cmd = showHidden
-						? `find '${path}' -type f`
-						: `find '${path}' -type f ! -name '.*' ! -path '*/.*'`;
-				} else {
-					cmd = showHidden ? `ls -la '${path}'` : `ls -l '${path}'`;
-				}
+    if (recursive) {
+     cmd = showHidden ? `find '${path}' -type f` : `find '${path}' -type f ! -name '.*' ! -path '*/.*'`
+    } else {
+     cmd = showHidden ? `ls -la '${path}'` : `ls -l '${path}'`
+    }
 
-				const result = await bash.exec(cmd);
+    const result = await bash.exec(cmd)
 
-				return {
-					content: [
-						{
-							type: "text" as const,
-							text: result.stdout || "(empty directory)",
-						},
-					],
-					isError: result.exitCode !== 0,
-				};
-			} catch (error) {
-				return createErrorResponse(error, "List error");
-			}
-		},
-	);
+    return {content: [{type: 'text' as const, text: result.stdout || '(empty directory)'}], isError: result.exitCode !== 0}
+   } catch (error) {
+    return createErrorResponse(error, 'List error')
+   }
+  }
+ )
 
-	// ========================================================================
-	// bash_direct_read - Direct filesystem read
-	// ========================================================================
-	server.registerTool(
-		"bash_direct_read",
-		{
-			description:
-				"Read a file directly from the persistent bash filesystem (without running cat).",
-			inputSchema: {
-				path: z.string().describe("The file path to read"),
-			},
-		},
-		async ({ path }: { path: string }) => {
-			try {
-				const bash = getPersistentBash();
-				const content = await bash.readFile(path);
+ // ========================================================================
+ // bash_direct_read - Direct filesystem read
+ // ========================================================================
+ server.registerTool('bash_direct_read', {description: 'Read a file directly from the persistent bash filesystem (without running cat).', inputSchema: {path: z.string().describe('The file path to read')}}, async ({path}: {path: string}) => {
+  try {
+   const bash = getPersistentBash()
+   const content = await bash.readFile(path)
 
-				return {
-					content: [
-						{
-							type: "text" as const,
-							text: truncateOutput(content, config.MAX_OUTPUT_LENGTH, "stdout"),
-						},
-					],
-				};
-			} catch (error) {
-				return createErrorResponse(error, "Read error");
-			}
-		},
-	);
+   return {content: [{type: 'text' as const, text: truncateOutput(content, config.MAX_OUTPUT_LENGTH, 'stdout')}]}
+  } catch (error) {
+   return createErrorResponse(error, 'Read error')
+  }
+ })
 
-	// ========================================================================
-	// bash_direct_write - Direct filesystem write
-	// ========================================================================
-	server.registerTool(
-		"bash_direct_write",
-		{
-			description:
-				"Write a file directly to the persistent bash filesystem (without running shell commands).",
-			inputSchema: {
-				path: z.string().describe("The file path to write"),
-				content: z.string().describe("The content to write"),
-			},
-		},
-		async ({ path, content }: { path: string; content: string }) => {
-			try {
-				const bash = getPersistentBash();
-				await bash.writeFile(path, content);
+ // ========================================================================
+ // bash_direct_write - Direct filesystem write
+ // ========================================================================
+ server.registerTool(
+  'bash_direct_write',
+  {description: 'Write a file directly to the persistent bash filesystem (without running shell commands).', inputSchema: {path: z.string().describe('The file path to write'), content: z.string().describe('The content to write')}},
+  async ({path, content}: {path: string; content: string}) => {
+   try {
+    const bash = getPersistentBash()
+    await bash.writeFile(path, content)
 
-				return createSuccessResponse(`Successfully wrote ${content.length} bytes to ${path}`);
-			} catch (error) {
-				return createErrorResponse(error, "Write error");
-			}
-		},
-	);
+    return createSuccessResponse(`Successfully wrote ${content.length} bytes to ${path}`)
+   } catch (error) {
+    return createErrorResponse(error, 'Write error')
+   }
+  }
+ )
 }

package/src/tools/index.ts

@@ -3,43 +3,35 @@
  * Aggregates and exports all MCP tools
  */
 
-import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import type {McpServer} from '@modelcontextprotocol/sdk/server/mcp.js'
+import {registerExecTools} from './exec-tools.ts'
+import {registerFileTools} from './file-tools.ts'
+import {registerInfoTools} from './info-tools.ts'
+import {registerSandboxTools} from './sandbox-tools.ts'
 
-import { registerExecTools } from "./exec-tools.ts";
-import { registerFileTools } from "./file-tools.ts";
-import { registerInfoTools } from "./info-tools.ts";
-import { registerSandboxTools } from "./sandbox-tools.ts";
+export {setJavaScriptToolHandler} from '../config/index.ts'
 
 // Re-export bash instance utilities
-export {
-	createBashInstance,
-	defineCommand,
-	getDefenseInDepthBox,
-	getPersistentBash,
-	getPersistentSandbox,
-	resetPersistentBash,
-	resetPersistentSandbox,
-	violationLogger,
-} from "./bash-instance.ts";
+export {createBashInstance, defineCommand, getDefenseInDepthBox, getPersistentBash, getPersistentSandbox, resetPersistentBash, resetPersistentSandbox, violationLogger} from './bash-instance.ts'
 // Re-export individual registrations for fine-grained control
-export { registerExecTools } from "./exec-tools.ts";
-export { registerFileTools } from "./file-tools.ts";
-export { registerInfoTools } from "./info-tools.ts";
-export { registerSandboxTools } from "./sandbox-tools.ts";
+export {registerExecTools} from './exec-tools.ts'
+export {registerFileTools} from './file-tools.ts'
+export {registerInfoTools} from './info-tools.ts'
+export {registerSandboxTools} from './sandbox-tools.ts'
 
 /**
  * Register all MCP tools with the server
  */
 export function registerAllTools(server: McpServer): void {
-	// Core execution tools
-	registerExecTools(server);
+ // Core execution tools
+ registerExecTools(server)
 
-	// File operation tools
-	registerFileTools(server);
+ // File operation tools
+ registerFileTools(server)
 
-	// Additional persistent sandbox tools
-	registerSandboxTools(server);
+ // Additional persistent sandbox tools
+ registerSandboxTools(server)
 
-	// Information and state tools
-	registerInfoTools(server);
+ // Information and state tools
+ registerInfoTools(server)
 }

package/src/tools/info-tools.ts

@@ -6,152 +6,120 @@
  * SecurityViolationLogger for defense-in-depth violation reporting.
  */
 
-import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
-import {
-	type AllCommandName,
-	type CommandName,
-	getCommandNames,
-	getNetworkCommandNames,
-	getPythonCommandNames,
-} from "just-bash";
-import {
-	buildExecutionLimits,
-	COMMAND_CATEGORIES,
-	config,
-	ENVIRONMENT_VARIABLES,
-	FEATURES,
-	parseMountsConfig,
-	UPSTREAM_JUST_BASH_VERSION,
-	violationLogger,
-} from "../config/index.ts";
-import { createErrorResponse, createJsonResponse } from "../utils/index.ts";
-import { getDefenseInDepthBox, getPersistentBash } from "./bash-instance.ts";
+import type {McpServer} from '@modelcontextprotocol/sdk/server/mcp.js'
+import {type AllCommandName, type CommandName, getCommandNames, getJavaScriptCommandNames, getNetworkCommandNames, getPythonCommandNames} from 'just-bash'
+import {buildExecutionLimits, COMMAND_CATEGORIES, config, ENVIRONMENT_VARIABLES, FEATURES, parseMountsConfig, UPSTREAM_JUST_BASH_VERSION, violationLogger} from '../config/index.ts'
+import {createErrorResponse, createJsonResponse} from '../utils/index.ts'
+import {getDefenseInDepthBox, getPersistentBash} from './bash-instance.ts'
 
 /**
  * Register information tools with the MCP server
  */
 export function registerInfoTools(server: McpServer): void {
-	// ========================================================================
-	// bash_info - Environment information
-	// ========================================================================
-	server.registerTool(
-		"bash_info",
-		{
-			description: "Get information about the bash environment configuration.",
-			inputSchema: {},
-		},
-		async () => {
-			const mounts = parseMountsConfig();
-			const fsMode =
-				mounts.length > 0
-					? "mountable"
-					: config.READ_WRITE_ROOT
-						? "read-write"
-						: config.OVERLAY_ROOT
-							? "overlay"
-							: "in-memory";
+ // ========================================================================
+ // bash_info - Environment information
+ // ========================================================================
+ server.registerTool('bash_info', {description: 'Get information about the bash environment configuration.', inputSchema: {}}, async () => {
+  const mounts = parseMountsConfig()
+  const fsMode = mounts.length > 0 ? 'mountable' : config.READ_WRITE_ROOT ? 'read-write' : config.OVERLAY_ROOT ? 'overlay' : 'in-memory'
 
-			// Get actual available commands (respects ALLOWED_COMMANDS filter)
-			const allBuiltinCommands = getCommandNames();
-			const availableCommands = config.ALLOWED_COMMANDS
-				? allBuiltinCommands.filter((cmd) =>
-						config.ALLOWED_COMMANDS?.includes(cmd as AllCommandName as CommandName),
-					)
-				: allBuiltinCommands;
+  // Get actual available commands (respects ALLOWED_COMMANDS filter)
+  const allBuiltinCommands = getCommandNames()
+  const availableCommands = config.ALLOWED_COMMANDS ? allBuiltinCommands.filter(cmd => config.ALLOWED_COMMANDS?.includes(cmd as AllCommandName as CommandName)) : allBuiltinCommands
 
-			// Build defense-in-depth status with violation stats
-			const didBox = getDefenseInDepthBox();
-			const defenseInDepthStatus = config.ENABLE_DEFENSE_IN_DEPTH
-				? {
-						enabled: true,
-						auditMode: config.DEFENSE_IN_DEPTH_AUDIT,
-						consoleLogging: config.DEFENSE_IN_DEPTH_LOG,
-						boxActive: didBox?.isActive() ?? false,
-						...(didBox && {
-							stats: didBox.getStats(),
-						}),
-						violations: {
-							total: violationLogger.getTotalCount(),
-							hasViolations: violationLogger.hasViolations(),
-							summary: violationLogger.getSummary(),
-						},
-					}
-				: { enabled: false };
+  // Build defense-in-depth status with violation stats
+  const didBox = getDefenseInDepthBox()
+  const defenseInDepthStatus = config.ENABLE_DEFENSE_IN_DEPTH
+   ? {
+      enabled: true,
+      auditMode: config.DEFENSE_IN_DEPTH_AUDIT,
+      consoleLogging: config.DEFENSE_IN_DEPTH_LOG,
+      boxActive: didBox?.isActive() ?? false,
+      ...(didBox && {stats: didBox.getStats()}),
+      violations: {total: violationLogger.getTotalCount(), hasViolations: violationLogger.hasViolations(), summary: violationLogger.getSummary()}
+     }
+   : {enabled: false}
 
-			const info = {
-				version: config.VERSION,
-				upstreamVersion: UPSTREAM_JUST_BASH_VERSION,
-				fsMode,
-				fsRoot: config.READ_WRITE_ROOT || config.OVERLAY_ROOT || null,
-				overlayReadOnly: config.OVERLAY_ROOT ? config.OVERLAY_READ_ONLY : null,
-				mounts: mounts.length > 0 ? mounts.map((m) => ({ mountPoint: m.mountPoint })) : null,
-				initialCwd: config.INITIAL_CWD,
-				networkEnabled: config.ALLOW_NETWORK,
-				allowedUrlPrefixes:
-					config.ALLOWED_URL_PREFIXES.length > 0 ? config.ALLOWED_URL_PREFIXES : null,
-				allowedMethods: config.ALLOW_NETWORK ? config.ALLOWED_METHODS : null,
-				maxResponseSize: config.MAX_RESPONSE_SIZE ?? null,
-				maxOutputLength: config.MAX_OUTPUT_LENGTH,
-				maxFileReadSize: config.MAX_FILE_READ_SIZE ?? null,
-				loggingEnabled: config.ENABLE_LOGGING,
-				tracingEnabled: config.ENABLE_TRACING,
-				pythonEnabled: config.ENABLE_PYTHON,
-				defenseInDepth: defenseInDepthStatus,
-				commandFilter: config.ALLOWED_COMMANDS || null,
-				executionLimits: buildExecutionLimits(),
-				availableCommands,
-				networkCommands: config.ALLOW_NETWORK ? getNetworkCommandNames() : [],
-				pythonCommands: config.ENABLE_PYTHON ? getPythonCommandNames() : [],
-				commandCategories: COMMAND_CATEGORIES,
-				features: FEATURES,
-				environmentVariables: ENVIRONMENT_VARIABLES,
-			};
+  const info = {
+   version: config.VERSION,
+   upstreamVersion: UPSTREAM_JUST_BASH_VERSION,
+   fsMode,
+   fsRoot: config.READ_WRITE_ROOT || config.OVERLAY_ROOT || null,
+   overlayReadOnly: config.OVERLAY_ROOT ? config.OVERLAY_READ_ONLY : null,
+   mounts: mounts.length > 0 ? mounts.map(m => ({mountPoint: m.mountPoint})) : null,
+   initialCwd: config.INITIAL_CWD,
+   networkEnabled: config.ALLOW_NETWORK,
+   allowedUrlPrefixes: config.ALLOWED_URL_PREFIXES.length > 0 ? config.ALLOWED_URL_PREFIXES : null,
+   allowedMethods: config.ALLOW_NETWORK ? config.ALLOWED_METHODS : null,
+   maxResponseSize: config.MAX_RESPONSE_SIZE ?? null,
+   maxOutputLength: config.MAX_OUTPUT_LENGTH,
+   maxFileReadSize: config.MAX_FILE_READ_SIZE ?? null,
+   loggingEnabled: config.ENABLE_LOGGING,
+   tracingEnabled: config.ENABLE_TRACING,
+   pythonEnabled: config.ENABLE_PYTHON,
+   javascriptEnabled: config.ENABLE_JAVASCRIPT,
+   javascriptBootstrapConfigured: config.JAVASCRIPT_BOOTSTRAP !== undefined,
+   defenseInDepth: defenseInDepthStatus,
+   commandFilter: config.ALLOWED_COMMANDS || null,
+   mcpTools: [
+    'bash',
+    'bash_exec',
+    'bash_exec_persistent',
+    'bash_reset',
+    'bash_write_file',
+    'bash_read_file',
+    'bash_list_files',
+    'bash_direct_read',
+    'bash_direct_write',
+    'bash_sandbox_run',
+    'bash_sandbox_domain',
+    'bash_sandbox_write_files',
+    'bash_sandbox_read_file',
+    'bash_sandbox_mkdir',
+    'bash_sandbox_stop',
+    'bash_sandbox_reset',
+    'bash_info',
+    'bash_get_cwd',
+    'bash_get_env'
+   ],
+   executionLimits: buildExecutionLimits(),
+   availableCommands,
+   networkCommands: config.ALLOW_NETWORK ? getNetworkCommandNames() : [],
+   pythonCommands: config.ENABLE_PYTHON ? getPythonCommandNames() : [],
+   javascriptCommands: config.ENABLE_JAVASCRIPT ? getJavaScriptCommandNames() : [],
+   commandCategories: COMMAND_CATEGORIES,
+   features: FEATURES,
+   environmentVariables: ENVIRONMENT_VARIABLES
+  }
 
-			return createJsonResponse(info);
-		},
-	);
+  return createJsonResponse(info)
+ })
 
-	// ========================================================================
-	// bash_get_cwd - Get current working directory
-	// ========================================================================
-	server.registerTool(
-		"bash_get_cwd",
-		{
-			description: "Get the current working directory of the persistent bash environment.",
-			inputSchema: {},
-		},
-		async () => {
-			try {
-				const bash = getPersistentBash();
-				const cwd = bash.getCwd();
+ // ========================================================================
+ // bash_get_cwd - Get current working directory
+ // ========================================================================
+ server.registerTool('bash_get_cwd', {description: 'Get the current working directory of the persistent bash environment.', inputSchema: {}}, async () => {
+  try {
+   const bash = getPersistentBash()
+   const cwd = bash.getCwd()
 
-				return {
-					content: [{ type: "text" as const, text: cwd }],
-				};
-			} catch (error) {
-				return createErrorResponse(error);
-			}
-		},
-	);
+   return {content: [{type: 'text' as const, text: cwd}]}
+  } catch (error) {
+   return createErrorResponse(error)
+  }
+ })
 
-	// ========================================================================
-	// bash_get_env - Get environment variables
-	// ========================================================================
-	server.registerTool(
-		"bash_get_env",
-		{
-			description: "Get all environment variables from the persistent bash environment.",
-			inputSchema: {},
-		},
-		async () => {
-			try {
-				const bash = getPersistentBash();
-				const env = bash.getEnv();
+ // ========================================================================
+ // bash_get_env - Get environment variables
+ // ========================================================================
+ server.registerTool('bash_get_env', {description: 'Get all environment variables from the persistent bash environment.', inputSchema: {}}, async () => {
+  try {
+   const bash = getPersistentBash()
+   const env = bash.getEnv()
 
-				return createJsonResponse(env);
-			} catch (error) {
-				return createErrorResponse(error);
-			}
-		},
-	);
+   return createJsonResponse(env)
+  } catch (error) {
+   return createErrorResponse(error)
+  }
+ })
 }