Explicit sandbox configuration for workspace operations.
Describes allowed/blocked paths, resource limits, shell access, and timeouts. When provided, this config is validated at startup and enforced by the runner.
'''Phase 1:''' Config structure, validation, and documentation. '''Phase 2:''' Enforcement in runner and tools. '''Phase 3:''' Advanced policies (profiles, allowlists).
Value parameters
- allowedCommands
-
Set of bare executable names permitted by executeCommand. Defaults to WorkspaceSandboxConfig.ReadOnlyCommands. Use WorkspaceSandboxConfig.ReadWriteCommands to also permit write-capable commands (cp, mv, rm, mkdir, …).
- allowedPaths
-
If non-empty, only these paths are accessible; if empty, whole workspace
- defaultCommandTimeoutSeconds
-
Default timeout for shell commands
- excludePatterns
-
Glob patterns for paths to exclude from explore/search (e.g. node_modules, .git)
- limits
-
Resource limits (file size, directory entries, search results, output size)
- networkAllowed
-
Documentation: whether network access from commands is assumed (Phase 2: enforce)
- readOnlyPaths
-
Paths under workspace root that are read-only (writes denied)
- shellAllowed
-
Whether
executeCommandis allowed (false = read-only file ops only)
Attributes
- Companion
- object
- Graph
-
- Supertypes
-
trait Serializabletrait Producttrait Equalsclass Objecttrait Matchableclass Any