Harden tmux MCP tool surface#76

Merged

tony merged 30 commits into

mainfrom

fix/issues-68-75-mcp-hardening

Jun 13, 2026

Commits on Jun 13, 2026

mcp(fix[search]): Block tmux format jobs in search_panes
tony
committed
mcp(fix[display]): Reject tmux format jobs
tony
committed
mcp(fix[middleware]): Raise structured response backstop
tony
committed
mcp(fix[safety]): Fail closed on invalid safety tier
tony
committed
mcp(fix[cli]): Pin stdio transport at startup
tony
committed
mcp(feat[pane]): Add run_command tool
tony
committed
mcp(fix[pane]): Use libtmux reset for clear_pane
tony
committed
mcp(fix[metadata]): Expose pane metadata and typed marker
tony
committed
mcp(fix[pane]): Keep run_command output in tail
tony
committed
mcp(test[middleware]): Xfail run_command command redaction
tony
committed
mcp(fix[middleware]): Redact run_command command in audit log
tony
committed
mcp(test[pane]): Xfail run_command output over-filtering
tony
committed
mcp(fix[pane]): Filter run_command sync line by UUID only
tony
committed
mcp(docs[utils]): Count run_command among ANNOTATIONS_SHELL tools
tony
committed
mcp(docs[search]): Note #( in format-injection comment
tony
committed
mcp(fix[pane]): Hide wrapped run_command sync fragments
tony
committed
mcp(test[pane]): Xfail run_command status isolation
tony
committed
mcp(fix[pane]): Isolate run_command status trailer
tony
committed
mcp(test[pane]): Xfail run_command history suppression
tony
committed
mcp(fix[pane]): Add run_command history suppression
tony
committed
mcp(test[pane]): Xfail run_command sync filtering
tony
committed
mcp(fix[pane]): Tighten run_command sync filtering
tony
committed
mcp(docs[safety]): Align clear_pane annotation table
tony
committed
mcp(docs[pane]): Restore join_wrapped rationale in run_command
tony
committed
mcp(docs[pane]): Drop bash-only HISTCONTROL from suppress_history
tony
committed
mcp(docs[pane]): Note run_command subshell isolation
tony
committed
mcp(test[pane]): Xfail run_command status targeting
tony
committed
mcp(fix[pane]): Target run_command status handoff
tony
committed
mcp(style[pane]): Use target_pane_id in RunCommandResult
tony
committed
mcp(docs[CHANGES]): Tool-surface hardening and run_command
tony
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Harden tmux MCP tool surface#76

Harden tmux MCP tool surface#76
tony merged 30 commits into
mainfrom
fix/issues-68-75-mcp-hardening

Commits on Jun 13, 2026

mcp(fix[search]): Block tmux format jobs in search_panes

mcp(fix[display]): Reject tmux format jobs

mcp(fix[middleware]): Raise structured response backstop

mcp(fix[safety]): Fail closed on invalid safety tier

mcp(fix[cli]): Pin stdio transport at startup

mcp(feat[pane]): Add run_command tool

mcp(fix[pane]): Use libtmux reset for clear_pane

mcp(fix[metadata]): Expose pane metadata and typed marker

mcp(fix[pane]): Keep run_command output in tail

mcp(test[middleware]): Xfail run_command command redaction

mcp(fix[middleware]): Redact run_command command in audit log

mcp(test[pane]): Xfail run_command output over-filtering

mcp(fix[pane]): Filter run_command sync line by UUID only

mcp(docs[utils]): Count run_command among ANNOTATIONS_SHELL tools

mcp(docs[search]): Note #( in format-injection comment

mcp(fix[pane]): Hide wrapped run_command sync fragments

mcp(test[pane]): Xfail run_command status isolation

mcp(fix[pane]): Isolate run_command status trailer

mcp(test[pane]): Xfail run_command history suppression

mcp(fix[pane]): Add run_command history suppression

mcp(test[pane]): Xfail run_command sync filtering

mcp(fix[pane]): Tighten run_command sync filtering

mcp(docs[safety]): Align clear_pane annotation table

mcp(docs[pane]): Restore join_wrapped rationale in run_command

mcp(docs[pane]): Drop bash-only HISTCONTROL from suppress_history

mcp(docs[pane]): Note run_command subshell isolation

mcp(test[pane]): Xfail run_command status targeting

mcp(fix[pane]): Target run_command status handoff

mcp(style[pane]): Use target_pane_id in RunCommandResult

mcp(docs[CHANGES]): Tool-surface hardening and run_command