Skip to content
Agent Dev Lab Agent Dev Lab

AsrtBashExecutorOptions

Defined in: packages/tools/src/bash/asrt/executor.ts:24

Properties

Section titled “Properties”

allowedDomains?

Section titled “allowedDomains?”

optional allowedDomains?: string[]

Defined in: packages/tools/src/bash/asrt/executor.ts:47

Domains allowed for network access. Omit/empty (the default) means no network access.

allowEnv?

Section titled “allowEnv?”

optional allowEnv?: AllowEnv

Defined in: packages/tools/src/bash/asrt/executor.ts:57

Host environment variables to expose inside the sandbox. Omitted / [] → none. true → every string-valued host var. A list matches names (literal, glob, or RegExp). The supervisor process itself may still inherit the host env (it is trusted); only the sandboxed command’s env is filtered.

allowRead?

Section titled “allowRead?”

optional allowRead?: "**" | string[] | null

Defined in: packages/tools/src/bash/asrt/executor.ts:44

Confine reads to these paths. Omitted — escape-hatch default — confines reads to allowWrite (executors have no cwd). Providers fill omitted reads with [cwd] via mergePolicy before pooling. Pass UNBOUNDED_ALLOW_READ for host-wide reads (ASRT’s read-everywhere posture). null / [] mean no user read roots.

A bound list is enforced inside this wrapper (ASRT’s own model is deny-then-allow). That encoding — and the system / vendor carve-outs needed so commands can still execute — is not part of BashExecutor.describe. Caller denyRead is applied on top and is what describe() reports.

allowWrite

Section titled “allowWrite”

allowWrite: string[]

Defined in: packages/tools/src/bash/asrt/executor.ts:30

Paths writable inside the sandbox — e.g. the tool’s configured project root. Required, matching the no-unsandboxed-default rule: pass [] for a sandbox that can run commands but write nowhere, not an implicit “everything.”

deniedDomains?

Section titled “deniedDomains?”

optional deniedDomains?: string[]

Defined in: packages/tools/src/bash/asrt/executor.ts:48

denyRead?

Section titled “denyRead?”

optional denyRead?: string[]

Defined in: packages/tools/src/bash/asrt/executor.ts:32

Paths to deny read, on top of whatever ASRT denies by default (e.g. ~/.ssh).

denyWrite?

Section titled “denyWrite?”

optional denyWrite?: string[]

Defined in: packages/tools/src/bash/asrt/executor.ts:45

maxOutputBytes?

Section titled “maxOutputBytes?”

optional maxOutputBytes?: number

Defined in: packages/tools/src/bash/asrt/executor.ts:50

Bytes to keep from stdout/stderr each before truncating. Default 1,000,000 (1 MB).

tmpDir?

Section titled “tmpDir?”

optional tmpDir?: string

Defined in: packages/tools/src/bash/asrt/executor.ts:64

Directory ASRT sets as TMPDIR inside the sandbox (via CLAUDE_CODE_TMPDIR on the supervisor). Omitted → a fresh mkdtemp this executor owns and removes on dispose(). An explicit path is created if missing, must pass the ownership guard, and is never removed on dispose (caller owns lifecycle — safe to share across pool keys).