Summary
The allow-list is a file, so the agent cannot run anything you did not write down.
Every script has an entry with its path, arguments and a timeout, and the run call can only reach what is in there. The information call tells the agent what a script expects before it calls, and the reload call picks up new entries without a restart.
What it is
A runner for developer-defined bash scripts. Each script is declared in a configuration file with its path, description, arguments and timeout, and runs either inside the project's Docker container or directly on your host.
What you get
- list_scripts — the scripts currently declared
- get_script_info — one script's description and the arguments it accepts, so a call can be formed correctly first time
- run_script — runs a declared script with arguments, honouring the timeout set for it and returning errors rather than hanging
- get_working_directory and set_working_directory — the directory scripts run in, read and changed, for moving between project contexts
- reload_config — picks up configuration changes without restarting the server
Requirements
Python, and a configuration file listing each script with its path, description, arguments and timeout. Docker if you want the containerised setup the project ships with; otherwise it runs against your own shell.