Dynamically grant read access to an additional root directory. Used by the runtime when folder access is approved at the guardrails layer.
Dynamically grant write access to an additional root directory. Used by the runtime when folder access is approved at the guardrails layer.
Execute a shell command
Optionaloptions: { cwd?: string; env?: Record<string, string>; timeout?: number }List directory contents
Optionaloptions: ListDirectoryOptionsRead a file
Optionaloptions: FileReadOptionsRead a file as a raw Buffer (for binary document formats). Enforces the same filesystem security policy as readFile.
Run a script file
Optionaloptions: ScriptOptionsWrite to a file
Optionaloptions: FileWriteOptions
Shell service for executing commands