Yuzhu Shen afe4249cfe Restrict Unix local MCP servers to stdio descriptors (#47094) ...

## Why

Local MCP servers communicate over stdio, so unrelated parent file descriptors should not propagate into the server or its descendants.

## What changed

Apply `DescriptorPolicy::StdioOnly` when launching local stdio MCP servers on Unix, preserving their explicit transport stdio.

## Testing

Add Unix integration tests that check inheritable pipe, socket, and file descriptors are absent from servers and descendants across absolute, relative, and shell-fallback launches. Verify MCP communication, arguments, environment, working directory, parent descriptor ownership, and exec failure reporting remain intact.

GitOrigin-RevId: 37409a5673dbaafa851fd1f78e3a2443eda5f7c6

2026-09-21 19:37:46 +00:00

..

mcp_2026_mrtr

Preserve metadata in native user verification requests (#46952)

2026-09-21 07:01:52 +00:00

foreign_stdio_cwd.rs

mcp: accept foreign absolute cwd for remote stdio (#29493)

2026-06-23 01:33:51 +00:00

mcp_2026_discovery.rs

Add read-only policy support to MCP tool requests (#46042)

2026-09-16 22:25:54 +00:00

mcp_2026_message_limits.rs

Complete MCP 2026 client support (#35725)

2026-07-28 06:06:58 +00:00

mcp_2026_mrtr.rs

Add read-only policy support to MCP tool requests (#46042)

2026-09-16 22:25:54 +00:00

mcp_2026_oauth_discovery.rs

Harden MCP OAuth callback handling (#40691)

2026-08-25 20:26:23 +00:00

mcp_2026_sse_discovery.rs

Add MCP 2026-07-28 discovery support (#35724)

2026-07-28 05:52:12 +00:00

mcp_2026_stdio_discovery.rs

Propagate custom CA settings to local MCP servers (#38040)

2026-08-11 17:24:04 +00:00

mcp_2026_stdio.rs

Fix relative MCP server spawning on macOS (#42117)

2026-09-01 18:53:06 +00:00

mcp_events.rs

Add MCP event discovery and subscriptions (#37494)

2026-08-07 19:36:52 +00:00

process_group_cleanup.rs

Fix relative MCP server spawning on macOS (#42117)

2026-09-01 18:53:06 +00:00

resources.rs

Improve sandboxing, MCP errors, and cached approvals (#41196)

2026-08-27 20:05:08 +00:00

stdio_descriptor_boundary.rs

Restrict Unix local MCP servers to stdio descriptors (#47094)

2026-09-21 19:37:46 +00:00

stdio_message_limits.rs

Harden local MCP server process tree cleanup (#37366)

2026-08-07 03:34:49 +00:00

stdio_stderr_cleanup.rs

Close MCP stderr readers on client teardown (#43870)

2026-09-08 17:42:14 +00:00

streamable_http_oauth_startup.rs

Recover OAuth metadata discovery from 503 responses via OIDC (#44636)

2026-09-10 20:50:10 +00:00

streamable_http_oauth_store_pinning.rs

Enable coordinated MCP OAuth refresh (#42413)

2026-09-03 02:00:12 +00:00

streamable_http_oauth_tool_call.rs

Surface MCP reconnect signals when expired OAuth tokens cannot refresh (#43947)

2026-09-09 00:03:41 +00:00

streamable_http_recovery.rs

Preserve MCP authentication challenges on tool calls (#42552)

2026-09-03 15:12:02 +00:00

streamable_http_remote.rs

Cache executor metadata from initialization (#40343)

2026-08-24 06:43:07 +00:00

streamable_http_test_support.rs

Avoid port races in streamable HTTP tests (#42767)

2026-09-04 13:35:41 +00:00

streamable_http_user_agent.rs

Set a default user agent for MCP HTTP requests (#34883)

2026-07-23 06:13:12 +00:00