just-bash-mcp

The server relies on the `just-bash` library for sandboxing bash command execution within a virtual filesystem. Network access is disabled by default and, when enabled, can be restricted via URL and HTTP method allow-lists. Execution limits prevent resource exhaustion. While `ReadWriteFs` can provide direct disk access, it requires explicit configuration via environment variables, placing the responsibility on the deployer to set safe root directories. No `eval` or direct system calls outside of the `just-bash` sandbox are observed. `JSON.parse` on the `JUST_BASH_MOUNTS` environment variable is handled with a try-catch, reducing risk from malformed input.