WorkspaceToolProviderContext

Defined in: packages/tools/src/workspace/provider.ts:157

Extends

• Partial<BashSandboxPolicy>.Omit<WebToolProviderContext, "timeoutMs">

Extended by

• WorkspaceToolProviderOptions

Properties

allowedDomains?

optional allowedDomains?: string[]

Defined in: packages/tools/src/bash/executor-pool.ts:30

Inherited from

BashSandboxPolicy.allowedDomains

---

allowedUrls?

optional allowedUrls?: readonly (string | RegExp)[]

Defined in: packages/tools/src/web/provider.ts:96

Inherited from

Omit.allowedUrls

---

allowEnv?

optional allowEnv?: AllowEnv

Defined in: packages/tools/src/bash/executor-pool.ts:37

Host env vars exposed inside the sandbox. Omitted / [] → none. Part of the pool key.

Inherited from

BashSandboxPolicy.allowEnv

---

allowNetwork?

optional allowNetwork?: boolean

Defined in: packages/tools/src/bash/executor-pool.ts:33

Master network switch. Domain lists apply only when this is true.

Inherited from

BashSandboxPolicy.allowNetwork

---

allowPrivateNetwork?

optional allowPrivateNetwork?: boolean

Defined in: packages/tools/src/web/provider.ts:102

Inherited from

Omit.allowPrivateNetwork

---

allowRead?

optional allowRead?: "**" | string[] | null

Defined in: packages/tools/src/bash/executor-pool.ts:27

Paths reads are confined to. After provider merge: a list, UNBOUNDED_ALLOW_READ for host-wide, or null/[] for nothing readable. On options/context before merge, omit to default to [cwd].

Inherited from

BashSandboxPolicy.allowRead

---

allowWrite?

optional allowWrite?: string[]

Defined in: packages/tools/src/bash/executor-pool.ts:21

Inherited from

BashSandboxPolicy.allowWrite

---

bashTimeoutMs?

optional bashTimeoutMs?: number

Defined in: packages/tools/src/workspace/provider.ts:162

Overrides options.bashTimeoutMs for this call — bash (and search) only, never fetchUrl.

---

cwd?

optional cwd?: string

Defined in: packages/tools/src/workspace/provider.ts:160

Overrides options.cwd for this call — drives both the file jail root and the bash cwd.

---

deniedDomains?

optional deniedDomains?: string[]

Defined in: packages/tools/src/bash/executor-pool.ts:31

Inherited from

BashSandboxPolicy.deniedDomains

---

denyRead?

optional denyRead?: string[]

Defined in: packages/tools/src/bash/executor-pool.ts:28

Inherited from

BashSandboxPolicy.denyRead

---

denyWrite?

optional denyWrite?: string[]

Defined in: packages/tools/src/bash/executor-pool.ts:29

Inherited from

BashSandboxPolicy.denyWrite

---

fetchTimeoutMs?

optional fetchTimeoutMs?: number

Defined in: packages/tools/src/workspace/provider.ts:169

Overrides options.fetchTimeoutMs for this call — fetchUrl only, never bash. Named apart from bashTimeoutMs so the two independent knobs cannot collide.

---

maxReadBytes?

optional maxReadBytes?: number

Defined in: packages/tools/src/workspace/provider.ts:164

Overrides options.maxReadBytes for this call.

---

maxRedirects?

optional maxRedirects?: number

Defined in: packages/tools/src/web/provider.ts:105

Inherited from

Omit.maxRedirects

---

maxResponseBytes?

optional maxResponseBytes?: number

Defined in: packages/tools/src/web/provider.ts:104

Inherited from

Omit.maxResponseBytes

---

maxWriteBytes?

optional maxWriteBytes?: number

Defined in: packages/tools/src/workspace/provider.ts:166

Overrides options.maxWriteBytes for this call.

---

tmpDir?

optional tmpDir?: string

Defined in: packages/tools/src/bash/executor-pool.ts:42

ASRT-only. Directory used as TMPDIR inside the sandbox. Omitted → the executor creates a per-instance directory. Native backend rejects this field.

Inherited from

BashSandboxPolicy.tmpDir