Optional memoryMBMemory budget in megabytes, handed to the executor with each call. The in-process executor reports the memory used and does not limit it; an executor that can limit memory uses it as the limit.
128
Optional executorWhat runs forged code. Defaults to an InProcessExecutor (node:vm
inside this process; isolates: false).
Optional timeoutMaximum wall-clock execution time in milliseconds.
5000
Optional fetchWhen fetch is in the allowlist, only requests to these domains are
permitted. An empty array means all domains are allowed.
Domain matching is case-insensitive and checks exact host equality.
[]
Optional fsFilesystem roots sandboxed fs.readFile calls may access.
Relative paths are resolved from the current working directory.
Defaults to the current working directory only.
Configuration options for the SandboxedToolForge.
All fields are optional and fall back to sensible defaults.