Skip to main content

Type Alias: SandboxAPI

SandboxAPI = "fetch" | "fs.readFile" | "crypto"

Defined in: packages/agentos/src/emergent/types.ts:50

Named APIs that sandboxed tool code is permitted to invoke.

All other I/O is forbidden by default. The allowlist is declared per-tool in SandboxedToolSpec and enforced by the sandbox runtime at execution time.

  • 'fetch' — Outbound HTTP/HTTPS requests via the global fetch API.
  • 'fs.readFile' — Synchronous read of files in a pre-approved path whitelist.
  • 'crypto' — Access to the Node.js crypto module for hashing / HMAC.