Interface SandboxedToolForgeConfig

Configuration options for the SandboxedToolForge.

All fields are optional and fall back to sensible defaults.

interface SandboxedToolForgeConfig {
    memoryMB?: number;
    executor?: ForgedCodeExecutor;
    timeoutMs?: number;
    fetchDomainAllowlist?: string[];
    fsReadRoots?: string[];
}

Properties

memoryMB?: number

Memory budget in megabytes, handed to the executor with each call. The in-process executor reports the memory used and does not limit it; an executor that can limit memory uses it as the limit.

Default

128

What runs forged code. Defaults to an InProcessExecutor (node:vm inside this process; isolates: false).

timeoutMs?: number

Maximum wall-clock execution time in milliseconds.

Default

5000
fetchDomainAllowlist?: string[]

When fetch is in the allowlist, only requests to these domains are permitted. An empty array means all domains are allowed. Domain matching is case-insensitive and checks exact host equality.

Default

[]
fsReadRoots?: string[]

Filesystem roots sandboxed fs.readFile calls may access. Relative paths are resolved from the current working directory. Defaults to the current working directory only.