Skip to content

BashToolProviderContext

Defined in: packages/tools/src/bash/provider.ts:168

optional allowedDomains?: string[]

Defined in: packages/tools/src/bash/executor-pool.ts:30

BashSandboxPolicy.allowedDomains


optional allowEnv?: AllowEnv

Defined in: packages/tools/src/bash/executor-pool.ts:37

Host env vars exposed inside the sandbox. Omitted / [] → none. Part of the pool key.

BashSandboxPolicy.allowEnv


optional allowNetwork?: boolean

Defined in: packages/tools/src/bash/executor-pool.ts:33

Master network switch. Domain lists apply only when this is true.

BashSandboxPolicy.allowNetwork


optional allowRead?: "**" | string[] | null

Defined in: packages/tools/src/bash/executor-pool.ts:27

Paths reads are confined to. After provider merge: a list, UNBOUNDED_ALLOW_READ for host-wide, or null/[] for nothing readable. On options/context before merge, omit to default to [cwd].

BashSandboxPolicy.allowRead


optional allowWrite?: string[]

Defined in: packages/tools/src/bash/executor-pool.ts:21

BashSandboxPolicy.allowWrite


optional cwd?: string

Defined in: packages/tools/src/bash/provider.ts:170

Overrides options.cwd for this call.


optional deniedDomains?: string[]

Defined in: packages/tools/src/bash/executor-pool.ts:31

BashSandboxPolicy.deniedDomains


optional denyRead?: string[]

Defined in: packages/tools/src/bash/executor-pool.ts:28

BashSandboxPolicy.denyRead


optional denyWrite?: string[]

Defined in: packages/tools/src/bash/executor-pool.ts:29

BashSandboxPolicy.denyWrite


optional timeoutMs?: number

Defined in: packages/tools/src/bash/provider.ts:172

Overrides options.timeoutMs for this call.


optional tmpDir?: string

Defined in: packages/tools/src/bash/executor-pool.ts:42

ASRT-only. Directory used as TMPDIR inside the sandbox. Omitted → the executor creates a per-instance directory. Native backend rejects this field.

BashSandboxPolicy.tmpDir