@agent-dev-lab/tools
Sandboxed file, bash, search (grep/glob), fetchUrl, and MCP client tools for
@agent-dev-lab/core. Providers take sandbox policy (pooled) or an escape-hatch
executor — there is no zero-config unsandboxed default. Side-effecting tools
(including MCP) require an import(“@agent-dev-lab/core”).EffectGate
(pass allowAllGate explicitly for tests / permissive hosts); MCP also
requires an explicit transport.
Interfaces
Section titled “Interfaces”- AddressPolicy
- ApprovalDispatcher
- ApprovalRequest
- AsrtBashExecutorOptions
- BashAccessInfo
- BashExecutor
- BashExecutorDescription
- BashExecutorProgress
- BashExecutorResult
- BashExecutorRunOptions
- BashSandboxPolicy
- BashToolOptions
- BashToolProviderContext
- BashToolProviderOptions
- BashTools
- FetchUrlResult
- FetchUrlToolOptions
- FileAccessInfo
- FileJail
- FileJailOptions
- FileToolProviderContext
- FileToolProviderOptions
- FileTools
- FileToolsOptions
- GatedToolOptions
- McpToolProviderOptions
- MCPTransport
- NativeBashExecutorOptions
- SearchTools
- SearchToolsOptions
- ToolEffectPayload
- ToolEffectScope
- WebAccessInfo
- WebToolProviderOptions
- WorkspaceToolProviderContext
- WorkspaceToolProviderOptions
Type Aliases
Section titled “Type Aliases”- ApprovalDecision
- BashExecutorUpdate
- BashProviderTools
- BashSafetyCheckInput
- BashSafetyCheckVerdict
- BashSafetyCheckWorkflow
- BashSandboxBackend
- BashToolResult
- DescribeBashEnvTool
- DescribeFileEnvTool
- DescribeWebEnvTool
- DescribeWorkspaceEnvTool
- FetchUrlTool
- FileAllowRead
- FileProviderTools
- HostnameResolver
- McpToolSchemas
- McpTransport
- ModelAllowRead
- SearchToolResult
- ToolReversibility
- UrlPattern
- WebProviderTools
- WebToolProviderContext
- WorkspaceBashAccessInfo
- WorkspaceTools
- WorkspaceWebAccessInfo
Variables
Section titled “Variables”- bashSafetyCheckInputSchema
- bashSafetyVerdictSchema
- DEFAULT_FETCH_TIMEOUT_MS
- DEFAULT_MAX_BYTES
- DEFAULT_MAX_REDIRECTS
- DEFAULT_MAX_RESPONSE_BYTES
- DEFAULT_MCP_CALL_TIMEOUT_MS
- DEFAULT_MCP_INIT_TIMEOUT_MS
- DEFAULT_MCP_MAX_OUTPUT_BYTES
- DEFAULT_SANDBOX_RELATIVE_PATH
- DEFAULT_TIMEOUT_MS
- silentRecordEffect
- TOOL_SUSPEND_UNSUPPORTED_MESSAGE
- UNBOUNDED_ALLOW_READ
Functions
Section titled “Functions”- acquireBashExecutor
- approvalDispatcherAsHandler
- assertAllowedUrl
- assertToolAllowed
- canonicalizeBashSandboxPolicy
- createAsrtBashExecutor
- createBashTool
- createBashToolProvider
- createFetchUrlTool
- createFileJail
- createFileToolProvider
- createFileTools
- createMcpToolProvider
- createNativeBashExecutor
- createSearchTools
- createWebToolProvider
- createWorkspaceToolProvider
- decideToolCall
- describeBashAccess
- describeFileAccess
- describeWebAccess
- effectScopeFromToolProviderContext
- isPublicAddress
- matchesUrlPattern
- releaseBashExecutor
- resolveDefaultSandboxRoot
- resolveFileAllowRead
- testToolEffectScope
- urlMatchCandidate