Skip to content

v2.1

v2.1 Tunneling & Access Controls
@NickName-AM NickName-AM tagged this 13 Jun 17:26 
Delivered: Per-host command allowlist, base-directory path sandbox across all 6 MCP tools, and local port forwarding via ssh_forward_port / ssh_list_forwards over ControlMaster mux.

Key accomplishments:
- exec_allowlist *[]string: nil=allow-all, empty=deny-all, prefix-match enforcement in execHandler
- withinBaseDir lexical sandbox (path.Clean + trailing-slash anchor) across all 6 file/exec/transfer tools
- ssh_forward_port + ssh_list_forwards via ssh -O forward/cancel — capability-gated, KillAll on SIGTERM
- Build-tag split for SysProcAttr platform divergence (Pdeathsig/Setpgid)

See .planning/milestones/v2.1-ROADMAP.md for full details.
Assets 2
Loading