veil-mcp v0.3.0
veil is an agent-native shell, as an MCP server — the first shell layer designed for an LLM agent (Claude Code), not a human at a terminal. Effects come back as data; detail is addressable and pulled on demand.
Highlights
- Quiet, structured
sh_run— exit / duration / files-changed + token-aware output. ~91% fewer bytes ingested on a realistic command mix; verbose builds/installs 92–98%. - Addressable detail (
sh_detail, incl.match=<regex>grep) — never re-run a command to see its output. - Effects-as-data (git porcelain or syscall trace), post-condition
expect, declarative retry, dry-run blast-radius classification (sh_plan). - Checkpoint/restore with APFS copy-on-write clone.
- Real opt-in sandbox (macOS
sandbox-exec; Linux bubblewrap) and structured trace (Linuxstrace). - Output honesty — mid-stream failures surfaced, truncation labeled, true line counts, binary preserved (never silently lossy).
- Optional PreToolUse guard hook to steer Bash →
sh_run.
Install
claude mcp add veil -- npx -y github:vkmtx/veil-mcp
Quality
173 smoke assertions + an 81-probe stress battery (0 anomalies) + 119-scenario classify fuzz + a token-savings backtest + a 5-dimension benchmark. CI runs on macOS and Linux.
See CHANGELOG.md.