Interface: SandboxToolsOptions
Defined in: src/batteries/sandbox/tools/index.ts:37
Options for constructing the sandbox's eight untrusted filesystem tools.
Properties
| Property | Type | Description | Defined in |
|---|---|---|---|
artifactMinter? | ArtifactMinter | Factory for artifacts returned by file-query tools; defaults to the battery minter. | src/batteries/sandbox/tools/index.ts:70 |
fileSystem | SandboxFileSystem | The filesystem capability used for stat, traversal, reads, and writes. | src/batteries/sandbox/tools/index.ts:48 |
gate | Gate | Required approval callback for every tool, including reads and searches. Remarks A read of .env is an exfiltration event, and search_files is a secret-discovery primitive, so construction rejects a missing gate with E_SANDBOX_GATE_REQUIRED. Calling the gate is a real suspension: a harness without a decider leaves the turn waiting rather than silently allowing the operation. | src/batteries/sandbox/tools/index.ts:60 |
handle | SandboxHandle | The handle that owns this tool set and issues its reader epoch. Remarks File-backed readers retain this epoch and check it before every operation. After SandboxHandle.dispose they fail with E_SANDBOX_NOT_INITIALIZED rather than falling through to the host filesystem. | src/batteries/sandbox/tools/index.ts:46 |
mimeResolver? | MimeResolver | Resolves MIME types while staging a file; defaults to the extension resolver. | src/batteries/sandbox/tools/index.ts:72 |
pathTranslator | PathTranslator | Translates model-visible paths into the sandbox backend and back. | src/batteries/sandbox/tools/index.ts:50 |
registeredTools? | readonly string[] | Tools which are not registered are not named in descriptions. | src/batteries/sandbox/tools/index.ts:84 |
search? | SandboxSearch | Search backend for search_files and find_files. Remarks These tools spawn rg through the sandbox enforcer and are OS-enforced; they do not have the in-process filesystem tools' weaker enforcement boundary. | src/batteries/sandbox/tools/index.ts:68 |
trustTier | "first-party" | "third-party-public" | "third-party-private" | Configuration-supplied provenance for staged media. Remarks This value cannot be inferred from source: core requires an explicit trust tier and batteries must not auto-classify content. | src/batteries/sandbox/tools/index.ts:82 |
writeRoot | string | Explicit host write root; it is never inferred. | src/batteries/sandbox/tools/index.ts:74 |