Sidney Marvin Fricke
ac9c470545
disable uvicorn access log
2026-06-24 12:38:15 +02:00
Sidney Marvin Fricke
c9ca78d9f1
remove path traversal restriction from file tools
...
Container isolation is sufficient — agents can access the full
filesystem. Absolute paths are passed through as-is.
2026-06-24 12:37:36 +02:00
Sidney Marvin Fricke
f7af92a10e
add file_read, file_write, file_list, file_delete tools
...
Agents can now read, write, create, and delete files directly in
/workspace without going through exec. Path traversal outside
/workspace is rejected.
2026-06-24 12:36:51 +02:00
Sidney Marvin Fricke
181ea1eaf6
simplify WORKSPACE to a hardcoded constant
...
WORKSPACE_DIR env var was never set in docker-compose.yml, so the
default always applied anyway. The container-internal mount point
is always /workspace, so there's no reason to make it configurable.
2026-06-24 12:32:08 +02:00
Sidney Marvin Fricke
0b8671b7b0
default cwd to /workspace for all exec, pty, and job calls
...
All subprocess and PTY spawns now start in WORKSPACE_DIR (default /workspace)
instead of inheriting /app from the Python process.
2026-06-24 12:31:30 +02:00
Sidney Marvin Fricke
88901d4187
log executed commands to server stdout
...
exec, pty_send, and job_run each emit an INFO line so docker compose
logs shows what the agent is running.
2026-06-24 12:30:38 +02:00
Sidney Marvin Fricke
d3f7d4eacf
implement MCP Streamable HTTP transport (JSON-RPC 2.0)
...
Replace custom REST API with standard MCP protocol so clients
like Claude Desktop/Code can connect via the streamable_http transport.
Handles initialize, tools/list, tools/call, ping, notifications.
2026-06-24 12:18:57 +02:00
Sidney Marvin Fricke
91ef94518b
as always ... cors
2026-06-24 12:15:12 +02:00
Sidney Marvin Fricke
68c418400e
init
2026-06-24 11:48:08 +02:00
Sidney Marvin Fricke