WorkspaceToolProviderOptions

Defined in: workspace/provider.ts:107

Extends

• WorkspaceToolProviderContext

Properties

allowedUrls?

optional allowedUrls?: readonly (string | RegExp)[]

Defined in: workspace/provider.ts:95

Overrides options.allowedUrls for this call — see WebToolProviderContext.allowedUrls.

Inherited from

WorkspaceToolProviderContext.allowedUrls

---

allowPrivateNetwork?

optional allowPrivateNetwork?: boolean

Defined in: workspace/provider.ts:97

Overrides options.allowPrivateNetwork for this call.

Inherited from

WorkspaceToolProviderContext.allowPrivateNetwork

---

bashTimeoutMs?

optional bashTimeoutMs?: number

Defined in: workspace/provider.ts:89

Overrides options.bashTimeoutMs for this call — bash (and search) only, never fetchUrl.

Inherited from

WorkspaceToolProviderContext.bashTimeoutMs

---

cwd?

optional cwd?: string

Defined in: workspace/provider.ts:87

Overrides options.cwd for this call — drives both the file jail root and the bash cwd.

Inherited from

WorkspaceToolProviderContext.cwd

---

executor

executor: BashExecutor

Defined in: workspace/provider.ts:109

Isolation strategy for the bash tool. Required — there is no unsandboxed default.

---

fetchTimeoutMs?

optional fetchTimeoutMs?: number

Defined in: workspace/provider.ts:100

Overrides options.fetchTimeoutMs for this call — fetchUrl only, never bash. Named apart from bashTimeoutMs so the two independent knobs cannot collide.

Inherited from

WorkspaceToolProviderContext.fetchTimeoutMs

---

fetchUrl?

optional fetchUrl?: boolean

Defined in: workspace/provider.ts:122

Include fetchUrl. Default true. Set false to omit the tool from listTools / getTools. Empty allowedUrls is not a deny — public http(s) still works — so it does not remove the tool. Fetch options (allowedUrls, allowPrivateNetwork, fetchTimeoutMs, maxResponseBytes, maxRedirects, resolver) and the matching toolProviderContext fields are rejected when this is false.

---

maxReadBytes?

optional maxReadBytes?: number

Defined in: workspace/provider.ts:91

Overrides options.maxReadBytes for this call.

Inherited from

WorkspaceToolProviderContext.maxReadBytes

---

maxRedirects?

optional maxRedirects?: number

Defined in: workspace/provider.ts:104

Overrides options.maxRedirects for this call.

Inherited from

WorkspaceToolProviderContext.maxRedirects

---

maxResponseBytes?

optional maxResponseBytes?: number

Defined in: workspace/provider.ts:102

Overrides options.maxResponseBytes for this call.

Inherited from

WorkspaceToolProviderContext.maxResponseBytes

---

maxWriteBytes?

optional maxWriteBytes?: number

Defined in: workspace/provider.ts:93

Overrides options.maxWriteBytes for this call.

Inherited from

WorkspaceToolProviderContext.maxWriteBytes

---

resolver?

optional resolver?: HostnameResolver

Defined in: workspace/provider.ts:114

Hostname resolver override, fixed at construction time — see FetchUrlToolOptions.

---

safetyCheck?

optional safetyCheck?: BashSafetyCheckWorkflow

Defined in: workspace/provider.ts:112

Optional AI-based safety check layered on top of the bash sandbox — see BashSafetyCheckWorkflow’s doc comment.