Named APIs that sandboxed tool code is permitted to invoke.
All other I/O is forbidden by default. The allowlist is declared per-tool in SandboxedToolSpec and enforced by the sandbox runtime at execution time.
'fetch'
fetch
'fs.readFile'
'fs.writeFile'
fs.write
'fs.unlink'
fs.delete
'crypto'
crypto
Named APIs that sandboxed tool code is permitted to invoke.
All other I/O is forbidden by default. The allowlist is declared per-tool in SandboxedToolSpec and enforced by the sandbox runtime at execution time.
'fetch'— Outbound HTTP/HTTPS requests via the globalfetchAPI.'fs.readFile'— Synchronous read of files in a pre-approved path whitelist.'fs.writeFile'— A file written under a ceiling's write roots (fs.write).'fs.unlink'— A file removed under a ceiling's delete roots (fs.delete).'crypto'— Access to the Node.jscryptomodule for hashing / HMAC.