---
url: >-
  https://adk.nht.io/api/@nhtio/adk/batteries/sandbox/interfaces/SandboxedExecutorOptions.md
description: Configuration for the sandboxed binary executor.
---

# Interface: SandboxedExecutorOptions

Defined in: [src/batteries/sandbox/executor.ts:18](https://github.com/NHTIO/ADK/blob/v1.20260824.1/src/src/batteries/sandbox/executor.ts#L18)

Configuration for the sandboxed binary executor.

## Properties

| Property                                     | Modifier   | Type                                                                   | Description                                                                    | Defined in                                                                                                                        |
| -------------------------------------------- | ---------- | ---------------------------------------------------------------------- | ------------------------------------------------------------------------------ | --------------------------------------------------------------------------------------------------------------------------------- |
|  `bypass?`       | `readonly` | (`cmd`: `string`) => `boolean`                                         | Command-only opt-out. This is deliberately never passed argv to the predicate. | [src/batteries/sandbox/executor.ts:24](https://github.com/NHTIO/ADK/blob/v1.20260824.1/src/src/batteries/sandbox/executor.ts#L24) |
|  `inner`          | `readonly` | [`BinaryExecutor`](../../media/contracts/interfaces/BinaryExecutor.md) | Underlying executor receiving the wrapped invocation.                          | [src/batteries/sandbox/executor.ts:22](https://github.com/NHTIO/ADK/blob/v1.20260824.1/src/src/batteries/sandbox/executor.ts#L22) |
|  `onSandbox?` | `readonly` | [`SandboxEventSink`](../type-aliases/SandboxEventSink.md)              | Loud audit sink; bypass is observability, not enforcement.                     | [src/batteries/sandbox/executor.ts:26](https://github.com/NHTIO/ADK/blob/v1.20260824.1/src/src/batteries/sandbox/executor.ts#L26) |
|  `sandbox`      | `readonly` | [`BinarySandbox`](BinarySandbox.md)                                    | Command wrapper used for non-bypassed invocations.                             | [src/batteries/sandbox/executor.ts:20](https://github.com/NHTIO/ADK/blob/v1.20260824.1/src/src/batteries/sandbox/executor.ts#L20) |