Documentation / @agentick/sandbox-secure-exec / SecureExecProviderConfig

Interface: SecureExecProviderConfig

Defined in: types.ts:7

Properties

cpuTimeLimitMs?

optional cpuTimeLimitMs: number

Defined in: types.ts:12

CPU time budget per exec() call in milliseconds. Default: 30_000.

---

memoryLimit?

optional memoryLimit: number

Defined in: types.ts:9

Isolate memory limit in MB. Default: 128.

---

moduleAccess?

optional moduleAccess: string | false

Defined in: types.ts:22

Host directory from which to resolve node_modules for require/import. Set to false to disable module access entirely. Default: process.cwd().

---

network?

optional network: boolean

Defined in: types.ts:25

Enable network access (fetch, HTTP) inside the isolate. Default: false.

---

persistence?

optional persistence: PersistenceAdapter

Defined in: types.ts:28

Optional persistence adapter for saving/restoring VFS state.

---

timingMitigation?

optional timingMitigation: "off" | "freeze"

Defined in: types.ts:35

Timing side-channel mitigation.

• "freeze" — Date.now() and performance.now() return static values (default)
• "off" — real timers, needed for code that uses timeouts/intervals

---

workspacePath?

optional workspacePath: string

Defined in: types.ts:15

Workspace root path inside the VFS. Default: "/workspace".