createNativeBashExecutor
createNativeBashExecutor(
options):BashExecutor
Defined in: bash/native-executor.ts:195
BashExecutor backed directly by an OS sandboxing primitive — Bubblewrap (bwrap) on
Linux. The non-default alternative to createAsrtBashExecutor: no npm dependency, no
network-proxy layer, but network access is all-or-nothing (no per-domain allowlist) and
there’s no violation logging.
macOS is not implemented yet. Constructing this executor on macOS throws a clear
“not implemented” error rather than silently doing nothing; use createAsrtBashExecutor
there instead.
Every property here (filesystem, network) is verified directly against real bwrap — see
native-executor.test.ts — rather than assumed from the flag names.