Interface FsWriteCeiling

The scope a host grants fs.write under. Every field is required: a forged tool writes only what the host has bounded. Granted only on an isolating executor.

interface FsWriteCeiling {
    roots: string[];
    mode: "create-only" | "create-or-replace";
    maxBytesPerFile: number;
    maxBytesPerCall: number;
    maxFilesPerCall: number;
    timeoutMs: number;
    approval: EffectApproval;
}

Properties

roots mode maxBytesPerFile maxBytesPerCall maxFilesPerCall timeoutMs approval

Properties

roots

roots: string[]

Absolute directories a forged tool may write under, after symlinks are resolved; [] grants nothing.

mode

mode: "create-only" | "create-or-replace"

'create-only' refuses an existing file; 'create-or-replace' replaces one whole, through a temporary file.

maxBytesPerFile

maxBytesPerFile: number

One file's size, in bytes.

maxBytesPerCall

maxBytesPerCall: number

The bytes one call of the tool may write, together.

maxFilesPerCall

maxFilesPerCall: number

The files one call of the tool may write.

timeoutMs

timeoutMs: number

One write's time bound; at most 2_147_483_647.

approval

approval: EffectApproval

Settings

Member Visibility

Theme

On This Page

rootsmodemaxBytesPerFilemaxBytesPerCallmaxFilesPerCalltimeoutMsapproval