refactor: use external go-restricted-runner package

The runner package has been extracted to a standalone repository at
github.com/inercia/go-restricted-runner. This commit:

- Removes the local pkg/runner/ directory (20 files)
- Updates imports in pkg/command to use the external package
- Adds go-restricted-runner as a dependency
- Creates a runner-compatible logger adapter for the external package

The external package provides the same runner implementations:
exec, sandbox-exec (macOS), firejail (Linux), and docker.

Author: inercia

go.mod

@@ -5,8 +5,8 @@ go 1.25.5
 require (
 	github.com/Masterminds/sprig/v3 v3.3.0
 	github.com/google/cel-go v0.26.1
+	github.com/inercia/go-restricted-runner v0.0.0-20260204084804-4beca5b00656
 	github.com/mark3labs/mcp-go v0.43.2
-	github.com/sashabaranov/go-openai v1.41.2
 	github.com/spf13/cobra v1.10.2
 	golang.org/x/sys v0.40.0
 	gopkg.in/yaml.v3 v3.0.1

go.sum

@@ -30,6 +30,8 @@ github.com/huandu/xstrings v1.5.0 h1:2ag3IFq9ZDANvthTwTiqSSZLjDc+BedvHPAp5tJy2TI
 github.com/huandu/xstrings v1.5.0/go.mod h1:y5/lhBue+AyNmUVz9RLU9xbLR0o4KIIExikq4ovT0aE=
 github.com/inconshreveable/mousetrap v1.1.0 h1:wN+x4NVGpMsO7ErUn/mUI3vEoE6Jt13X2s0bqwp9tc8=
 github.com/inconshreveable/mousetrap v1.1.0/go.mod h1:vpF70FUmC8bwa3OWnCshd2FqLfsEA9PFc4w1p2J65bw=
+github.com/inercia/go-restricted-runner v0.0.0-20260204084804-4beca5b00656 h1:HiSK6vBznkAmgZSsuK2zETq2k8dDTZd2VuaGBsQz5kQ=
+github.com/inercia/go-restricted-runner v0.0.0-20260204084804-4beca5b00656/go.mod h1:4eJiTSKybwS7d6yCPiX26xIN1mfLkqRj69cNaW3RltQ=
 github.com/invopop/jsonschema v0.13.0 h1:KvpoAJWEjR3uD9Kbm2HWJmqsEaHt8lBUpd0qHcIi21E=
 github.com/invopop/jsonschema v0.13.0/go.mod h1:ffZ5Km5SWWRAIN6wbDXItl95euhFz2uON45H2qjYt+0=
 github.com/kr/pretty v0.2.1/go.mod h1:ipq/a2n7PKx3OHsz4KJII5eveXtPO4qwEXGdVfWzfnI=
@@ -52,8 +54,6 @@ github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZN
 github.com/rogpeppe/go-internal v1.14.1 h1:UQB4HGPB6osV0SQTLymcB4TgvyWu6ZyliaW0tI/otEQ=
 github.com/rogpeppe/go-internal v1.14.1/go.mod h1:MaRKkUm5W0goXpeCfT7UZI6fk/L7L7so1lCWt35ZSgc=
 github.com/russross/blackfriday/v2 v2.1.0/go.mod h1:+Rmxgy9KzJVeS9/2gXHxylqXiyQDYRxCVz55jmeOWTM=
-github.com/sashabaranov/go-openai v1.41.2 h1:vfPRBZNMpnqu8ELsclWcAvF19lDNgh1t6TVfFFOPiSM=
-github.com/sashabaranov/go-openai v1.41.2/go.mod h1:lj5b/K+zjTSFxVLijLSTDZuP7adOgerWeFyZLUhAKRg=
 github.com/shopspring/decimal v1.4.0 h1:bxl37RwXBklmTi0C79JfXCEBD1cqqHt0bbgBAGFp81k=
 github.com/shopspring/decimal v1.4.0/go.mod h1:gawqmDU56v4yIKSwfBSFip1HdCCXN8/+DMd9qYNcwME=
 github.com/spf13/cast v1.10.0 h1:h2x0u2shc1QuLHfxi+cTJvs30+ZAHOGRic8uyGTDWxY=

pkg/command/command.go

@@ -16,7 +16,7 @@ import (
 
 	"github.com/inercia/MCPShell/pkg/common"
 	"github.com/inercia/MCPShell/pkg/config"
-	"github.com/inercia/MCPShell/pkg/runner"
+	"github.com/inercia/go-restricted-runner/pkg/runner"
 )
 
 // CommandHandler encapsulates the configuration and behavior needed to handle tool commands.

pkg/command/command_exec.go

@@ -8,7 +8,8 @@ import (
 	"time"
 
 	"github.com/inercia/MCPShell/pkg/common"
-	"github.com/inercia/MCPShell/pkg/runner"
+	runnercommon "github.com/inercia/go-restricted-runner/pkg/common"
+	"github.com/inercia/go-restricted-runner/pkg/runner"
 )
 
 // executeToolCommand handles the core logic of executing a command with the given parameters.
@@ -153,7 +154,15 @@ func (h *CommandHandler) executeToolCommand(ctx context.Context, params map[stri
 
 	// Create the appropriate runner with options
 	h.logger.Debug("Creating runner of type %s and checking implicit requirements", runnerType)
-	r, err := runner.New(runnerType, runnerOptions, h.logger)
+
+	// Create a runner-compatible logger
+	runnerLogger, err := runnercommon.NewLogger("", "", runnercommon.LogLevel(h.logger.Level()), false)
+	if err != nil {
+		h.logger.Error("Error creating runner logger: %v", err)
+		return "", nil, fmt.Errorf("error creating runner logger: %v", err)
+	}
+
+	r, err := runner.New(runnerType, runnerOptions, runnerLogger)
 	if err != nil {
 		h.logger.Error("Error creating runner: %v", err)
 		return "", nil, fmt.Errorf("error creating runner: %v", err)