Interface SandboxedToolForgeConfig

Configuration options for the SandboxedToolForge.

All fields are optional and fall back to sensible defaults.

interface SandboxedToolForgeConfig {
    memoryMB?: number;
    timeoutMs?: number;
    fetchDomainAllowlist?: string[];
    fsReadRoots?: string[];
}

Properties

memoryMB?: number

Maximum heap memory in megabytes for the sandbox process. Used with isolated-vm; the vm fallback cannot enforce memory limits.

Default

128
timeoutMs?: number

Maximum wall-clock execution time in milliseconds.

Default

5000
fetchDomainAllowlist?: string[]

When fetch is in the allowlist, only requests to these domains are permitted. An empty array means all domains are allowed. Domain matching is case-insensitive and checks exact host equality.

Default

[]
fsReadRoots?: string[]

Filesystem roots sandboxed fs.readFile calls may access. Relative paths are resolved from the current working directory. Defaults to the current working directory only.