BashSandboxPolicy

Defined in: packages/tools/src/bash/executor-pool.ts:20

Isolation policy fields — not cwd / timeouts / output caps.

Properties

allowedDomains?

optional allowedDomains?: string[]

Defined in: packages/tools/src/bash/executor-pool.ts:30

---

allowEnv?

optional allowEnv?: AllowEnv

Defined in: packages/tools/src/bash/executor-pool.ts:37

Host env vars exposed inside the sandbox. Omitted / [] → none. Part of the pool key.

---

allowNetwork?

optional allowNetwork?: boolean

Defined in: packages/tools/src/bash/executor-pool.ts:33

Master network switch. Domain lists apply only when this is true.

---

allowRead?

optional allowRead?: "**" | string[] | null

Defined in: packages/tools/src/bash/executor-pool.ts:27

Paths reads are confined to. After provider merge: a list, UNBOUNDED_ALLOW_READ for host-wide, or null/[] for nothing readable. On options/context before merge, omit to default to [cwd].

---

allowWrite

allowWrite: string[]

Defined in: packages/tools/src/bash/executor-pool.ts:21

---

deniedDomains?

optional deniedDomains?: string[]

Defined in: packages/tools/src/bash/executor-pool.ts:31

---

denyRead?

optional denyRead?: string[]

Defined in: packages/tools/src/bash/executor-pool.ts:28

---

denyWrite?

optional denyWrite?: string[]

Defined in: packages/tools/src/bash/executor-pool.ts:29

---

tmpDir?

optional tmpDir?: string

Defined in: packages/tools/src/bash/executor-pool.ts:42

ASRT-only. Directory used as TMPDIR inside the sandbox. Omitted → the executor creates a per-instance directory. Native backend rejects this field.