FileJailOptions

Defined in: packages/tools/src/file/jail.ts:46

Bounds for createFileJail. Security is allow/deny lists only — cwd is the relative-path base (default: home directory), not a privileged root.

allowRead / allowWrite omitted → [cwd]. UNBOUNDED_ALLOW_READ is host-wide reads. null / [] on read (and [] on write) allow nothing. Deny wins over allow, including unbounded read.

Properties

allowRead?

optional allowRead?: FileAllowRead

Defined in: packages/tools/src/file/jail.ts:52

---

allowWrite?

optional allowWrite?: string[]

Defined in: packages/tools/src/file/jail.ts:55

Omitted → [cwd]. [] → no writes.

---

cwd?

optional cwd?: string

Defined in: packages/tools/src/file/jail.ts:51

Relative-path base only — not a security root. Omitted → os.homedir() (expanded ~, not /).

---

denyRead?

optional denyRead?: string[]

Defined in: packages/tools/src/file/jail.ts:53

---

denyWrite?

optional denyWrite?: string[]

Defined in: packages/tools/src/file/jail.ts:56