local-shell-mcp 3.2.0__tar.gz

local_shell_mcp-3.2.0/.dockerignore

@@ -0,0 +1,22 @@
+.git
+.venv
+venv
+__pycache__
+*.py[cod]
+.pytest_cache
+.ruff_cache
+.mypy_cache
+.coverage
+htmlcov
+build
+dist
+*.egg-info
+workspaces
+node_modules
+vscode-extension/node_modules
+vscode-extension/out
+vscode-extension/dist
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+.DS_Store

local_shell_mcp-3.2.0/.env.example

@@ -0,0 +1,50 @@
+# Canonical copyable configuration example. Docker Compose reads `.env` automatically,
+# and non-Compose runtimes can use the same variables from their environment.
+# Optional YAML configuration is documented separately for advanced deployments.
+
+# Public HTTPS origin used by ChatGPT for OAuth discovery and callbacks.
+# Example: https://local-shell-mcp.example.com
+LOCAL_SHELL_MCP_PUBLIC_BASE_URL=https://your-public-host.example.com
+
+# ChatGPT custom connectors should use OAuth mode. Do not expose this service publicly with auth_mode=none.
+LOCAL_SHELL_MCP_AUTH_MODE=oauth
+
+# Stateful MCP sessions are released after three minutes without any HTTP activity.
+# The higher cap accommodates clients that frequently establish fresh sessions.
+LOCAL_SHELL_MCP_MCP_SESSION_IDLE_TIMEOUT_S=180
+LOCAL_SHELL_MCP_MCP_MAX_SESSIONS=1024
+
+# Required for approving the OAuth authorization page. Choose a strong random value.
+LOCAL_SHELL_MCP_OAUTH_ADMIN_PIN=change-me-long-random-pin
+
+# Required for stable bearer tokens across restarts. Generate with: openssl rand -hex 32
+LOCAL_SHELL_MCP_OAUTH_JWT_SECRET=change-me-64-hex-random-secret
+
+# Keep false unless the container is disposable and intentionally fully controlled by ChatGPT.
+LOCAL_SHELL_MCP_ALLOW_FULL_CONTAINER=false
+
+# Persist GitHub CLI, Git HTTPS credentials, GitCode credentials, SSH keys, .netrc, and GPG state across container rebuilds.
+# The Docker Compose example stores them in the local-shell-mcp-credentials volume.
+LOCAL_SHELL_MCP_PERSISTENT_CREDENTIALS=true
+
+# Optional for the cloudflared tunnel sidecar profile. This uses Cloudflare Tunnel only, not Cloudflare Access.
+CLOUDFLARE_TUNNEL_TOKEN=
+
+# Remote worker mode: enabled by default. Set false to disable /join, /remote/*,
+# and the remote_* MCP tools.
+LOCAL_SHELL_MCP_REMOTE_ENABLED=true
+LOCAL_SHELL_MCP_REMOTE_INVITE_TTL_S=600
+LOCAL_SHELL_MCP_REMOTE_POLL_TIMEOUT_S=25
+LOCAL_SHELL_MCP_REMOTE_JOB_TIMEOUT_S=3600
+
+# Shared native OpenTUI and browser terminal interface.
+LOCAL_SHELL_MCP_UI_ENABLED=true
+LOCAL_SHELL_MCP_UI_PATH=/ui
+LOCAL_SHELL_MCP_UI_WALLPAPER=bing
+LOCAL_SHELL_MCP_UI_TERMINAL_IDLE_TIMEOUT_S=3600
+LOCAL_SHELL_MCP_UI_TERMINAL_MAX_SESSIONS=8
+
+# Environment exposed to user shell commands. Values are comma-separated.
+# Block server/tunnel configuration from leaking into subprocesses by default.
+LOCAL_SHELL_MCP_SHELL_ENV_BLOCKLIST=CLOUDFLARE_TUNNEL_TOKEN
+LOCAL_SHELL_MCP_SHELL_ENV_BLOCKED_PREFIXES=LOCAL_SHELL_MCP_,DOCKER_

local_shell_mcp-3.2.0/.github/ISSUE_TEMPLATE/bug_report.yml

@@ -0,0 +1,62 @@
+name: Bug report
+description: Report a reproducible local-shell-mcp problem
+title: "bug: "
+labels: [bug]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Do not include secrets, OAuth pins, tunnel tokens, SSH keys, or bearer file-link URLs.
+  - type: textarea
+    id: summary
+    attributes:
+      label: Summary
+      description: What happened?
+    validations:
+      required: true
+  - type: textarea
+    id: steps
+    attributes:
+      label: Reproduction steps
+      description: Provide a minimal sequence of commands or UI steps.
+      placeholder: |
+        1. Start with ...
+        2. Run ...
+        3. Observe ...
+    validations:
+      required: true
+  - type: textarea
+    id: expected
+    attributes:
+      label: Expected behavior
+    validations:
+      required: true
+  - type: textarea
+    id: logs
+    attributes:
+      label: Logs and diagnostics
+      description: Redact sensitive values before posting.
+      render: text
+  - type: dropdown
+    id: deployment
+    attributes:
+      label: Deployment mode
+      options:
+        - Docker Compose
+        - Docker image without Compose
+        - Standalone binary
+        - VS Code extension
+        - Remote worker
+        - Other
+    validations:
+      required: true
+  - type: input
+    id: version
+    attributes:
+      label: Version or commit
+      placeholder: v2.5.0 or git SHA
+  - type: textarea
+    id: environment
+    attributes:
+      label: Environment
+      placeholder: OS, architecture, Python version, Docker version, MCP client, browser, tunnel provider

local_shell_mcp-3.2.0/.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1,5 @@
+blank_issues_enabled: true
+contact_links:
+  - name: Documentation
+    url: https://fwerkor.github.io/local-shell-mcp/
+    about: Read setup, usage, and troubleshooting documentation.

local_shell_mcp-3.2.0/.github/ISSUE_TEMPLATE/feature_request.yml

@@ -0,0 +1,28 @@
+name: Feature request
+description: Propose a focused improvement
+title: "feat: "
+labels: [enhancement]
+body:
+  - type: textarea
+    id: problem
+    attributes:
+      label: Problem
+      description: What limitation are you trying to solve?
+    validations:
+      required: true
+  - type: textarea
+    id: proposal
+    attributes:
+      label: Proposed solution
+      description: What should local-shell-mcp do differently?
+    validations:
+      required: true
+  - type: textarea
+    id: alternatives
+    attributes:
+      label: Alternatives considered
+  - type: textarea
+    id: safety
+    attributes:
+      label: Safety and compatibility notes
+      description: Mention new permissions, host access, network behavior, credentials, or MCP surface changes.

local_shell_mcp-3.2.0/.github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,17 @@
+## Summary
+
+- 
+
+## Validation
+
+- [ ] `ruff check .`
+- [ ] `pytest -q`
+- [ ] `mkdocs build --strict` if docs changed
+- [ ] VS Code extension compile if extension files changed
+
+## Safety checklist
+
+- [ ] No secrets, tunnel tokens, OAuth pins, private keys, or bearer file-link URLs are committed.
+- [ ] New or changed MCP tools are documented and tested.
+- [ ] Host-control, remote-worker, file-link, or credential behavior is explicitly described.
+- [ ] Backwards compatibility impact is noted.