BashToolProviderOptions
Defined in: packages/tools/src/bash/provider.ts:175
Extends
Section titled “Extends”Partial<BashSandboxPolicy>
Properties
Section titled “Properties”allowedDomains?
Section titled “allowedDomains?”
optionalallowedDomains?:string[]
Defined in: packages/tools/src/bash/executor-pool.ts:30
Inherited from
Section titled “Inherited from”BashSandboxPolicy.allowedDomains
allowEnv?
Section titled “allowEnv?”
optionalallowEnv?:AllowEnv
Defined in: packages/tools/src/bash/executor-pool.ts:37
Host env vars exposed inside the sandbox. Omitted / [] → none. Part of the pool key.
Inherited from
Section titled “Inherited from”allowNetwork?
Section titled “allowNetwork?”
optionalallowNetwork?:boolean
Defined in: packages/tools/src/bash/executor-pool.ts:33
Master network switch. Domain lists apply only when this is true.
Inherited from
Section titled “Inherited from”BashSandboxPolicy.allowNetwork
allowRead?
Section titled “allowRead?”
optionalallowRead?:"**"|string[] |null
Defined in: packages/tools/src/bash/executor-pool.ts:27
Paths reads are confined to. After provider merge: a list, UNBOUNDED_ALLOW_READ
for host-wide, or null/[] for nothing readable. On options/context before merge,
omit to default to [cwd].
Inherited from
Section titled “Inherited from”allowWrite?
Section titled “allowWrite?”
optionalallowWrite?:string[]
Defined in: packages/tools/src/bash/executor-pool.ts:21
Inherited from
Section titled “Inherited from”backend?
Section titled “backend?”
optionalbackend?:BashSandboxBackend
Defined in: packages/tools/src/bash/provider.ts:188
Sandbox backend when using the pool. Default "asrt". Invalid with executor.
optionalcwd?:string
Defined in: packages/tools/src/bash/provider.ts:190
Default working directory when a call’s context doesn’t specify one.
deniedDomains?
Section titled “deniedDomains?”
optionaldeniedDomains?:string[]
Defined in: packages/tools/src/bash/executor-pool.ts:31
Inherited from
Section titled “Inherited from”BashSandboxPolicy.deniedDomains
denyRead?
Section titled “denyRead?”
optionaldenyRead?:string[]
Defined in: packages/tools/src/bash/executor-pool.ts:28
Inherited from
Section titled “Inherited from”denyWrite?
Section titled “denyWrite?”
optionaldenyWrite?:string[]
Defined in: packages/tools/src/bash/executor-pool.ts:29
Inherited from
Section titled “Inherited from”effectGate
Section titled “effectGate”effectGate:
EffectGate
Defined in: packages/tools/src/bash/provider.ts:180
Pre-materialize gate for bash / describe-env. Required — pass import(“@agent-dev-lab/core”).allowAllGate explicitly for tests.
executor?
Section titled “executor?”
optionalexecutor?:BashExecutor
Defined in: packages/tools/src/bash/provider.ts:186
Isolation strategy. Optional when policy (allowWrite, …) is provided — the provider
acquires a shared executor from the process pool. Escape hatch for tests / custom
backends; mutually exclusive with policy fields and backend.
safetyCheck?
Section titled “safetyCheck?”
optionalsafetyCheck?:BashSafetyCheckWorkflow
Defined in: packages/tools/src/bash/provider.ts:198
Optional AI-based safety check layered on top of the sandbox — catches non-filesystem
dangerous intent (fork bombs, resource exhaustion, …) a filesystem/network jail can’t.
See BashSafetyCheckWorkflow’s doc comment.
timeoutMs?
Section titled “timeoutMs?”
optionaltimeoutMs?:number
Defined in: packages/tools/src/bash/provider.ts:192
Default wall-clock timeout (ms) when a call’s context doesn’t specify one.
tmpDir?
Section titled “tmpDir?”
optionaltmpDir?:string
Defined in: packages/tools/src/bash/executor-pool.ts:42
ASRT-only. Directory used as TMPDIR inside the sandbox. Omitted → the executor
creates a per-instance directory. Native backend rejects this field.