mcp_io_process 0.1.1

Policy-gated, sandboxed OS process / shell execution adapter for mcp_io. argv-only by default, deny-by-default allowlists, plan-commit for dangerous actions.

Changelog

0.1.1 - 2026-06-25

• Import hygiene: process_policy.dart imports the io policy contract via the public package:mcp_bundle/ports.dart (with an explicit show) instead of reaching into package:mcp_bundle/src/.... No API or behaviour change.

0.1.0

• Initial release. ProcessAdapter — a policy-gated, sandboxed OS process / shell execution device for mcp_io.
• Drives the existing io.* tool surface (io.execute, io.plan_execute, io.commit_execute, io.cancel_job, io.emergency_stop) — no new tool verbs.
• Actions: process.which (safe), process.run (guarded), process.spawn (dangerous, plan→commit), process.kill (guarded).
• ProcessSandboxConfig execution boundary: deny-by-default executable and working-directory allowlists, environment allowlist (no full parent-env inheritance), per-stream output cap, wall-clock timeout, and an off-by-default shell-evaluation gate.
• ProcessRunner seam (SystemProcessRunner backed by dart:io) for injectable, testable execution.
• ProcessPolicy.recommendedRules — opt-in deny-by-default policy posture.