feat(cloud): scaffold the read-only cloud-context MCP package and safety harness#48

Merged

sourcehawk merged 9 commits into

feature/cloud-context-mcpfrom

feature/cloud-context-mcp--scaffold

May 30, 2026

Commits on May 30, 2026

feat(cloud): provider interface and server skeleton (#45)

sourcehawk
and
claude
committed
feat(cloud): command allowlist with hardcoded deny floor (#45)

sourcehawk
and
claude
committed
feat(cloud): argv validation against allowlist, deny floor, and scope (#45)

sourcehawk
and
claude
committed
feat(cloud): no-shell argv exec core with output truncation (#45)

sourcehawk
and
claude
committed
feat(cloud): shared identity probe (#45)

sourcehawk
and
claude
committed
feat(cloud): list_inventory, session_status, run_cli, list_allowed_commands (#45)

sourcehawk
and
claude
committed
feat(cloud): register --kind=cloud --provider in serve.go (#45)

sourcehawk
and
claude
committed
fix(cloud): build an explicit minimal subprocess env instead of inheriting the parent (#45)

sourcehawk
and
claude
committed
test(cloud): assert with testify across the cloud package (#45)

sourcehawk
and
claude
committed