BashExecutorDescription
Defined in: packages/tools/src/bash/executor.ts:48
BashExecutor.describe’s return shape — the sandbox config actually in effect.
Properties
Section titled “Properties”allowRead
Section titled “allowRead”allowRead:
"**"|string[]
Defined in: packages/tools/src/bash/executor.ts:67
Absolute paths reads are confined to, or UNBOUNDED_ALLOW_READ when this
executor is not bounding reads (host filesystem visible read-only). [] means
nothing user-facing is readable (system paths may still be mounted so commands can
execute).
Escape-hatch executors report allowWrite when allowRead was omitted, and
UNBOUNDED_ALLOW_READ when the caller opted into host-wide reads. Pooled
policy maps omitted allowRead to [cwd] before construction.
Even when a list is set, the sandbox still contains the system paths any program
needs to execute (/usr, /etc, the lib directories), so /etc/passwd stays readable.
The guarantee is “no user data outside these roots,” not “only these roots.”
allowWrite
Section titled “allowWrite”allowWrite:
string[]
Defined in: packages/tools/src/bash/executor.ts:52
Absolute paths writable inside the sandbox.
backend
Section titled “backend”backend:
string
Defined in: packages/tools/src/bash/executor.ts:50
Which executor implementation this is, e.g. "asrt" or "native".
denyRead
Section titled “denyRead”denyRead:
string[]
Defined in: packages/tools/src/bash/executor.ts:69
Absolute paths hidden from reads, on top of the executor’s own defaults.
denyWrite
Section titled “denyWrite”denyWrite:
string[]
Defined in: packages/tools/src/bash/executor.ts:71
Absolute paths denied write access, on top of allowWrite not already covering them.
network
Section titled “network”network:
object
Defined in: packages/tools/src/bash/executor.ts:72
allowedDomains?
Section titled “allowedDomains?”
optionalallowedDomains?:string[]
Domains allowed when allowNetwork is true and the executor supports per-domain rules.
allowNetwork
Section titled “allowNetwork”allowNetwork:
boolean
deniedDomains?
Section titled “deniedDomains?”
optionaldeniedDomains?:string[]