ShellExecutor

def __init__(
    self,
    default_timeout: float = 60.0,
    workspace_dir: str | Path | None = None,
    allowed_paths: list[str] | None = None,
    allowed_commands: list[str] | None = None,
    denied_commands: list[str] | None = None,
    enable_command_filtering: bool = True,
    dangerous_patterns: list[tuple[str, str]] | None = None,
):
    """Initialize the shell executor with sandboxing options.

    Args:
        default_timeout: Default timeout in seconds for command execution.
        workspace_dir: Working directory for command execution. Commands will be executed
                 within this directory and cannot access files outside of it if path
                 restrictions are enabled. Defaults to current directory.
        allowed_paths: List of allowed path patterns (glob patterns). Commands can only
                      access paths matching these patterns. If None, all paths within
                      workspace_dir are allowed. Use ["**"] to allow all paths.
        allowed_commands: Whitelist of allowed commands (e.g., ["ls", "cat", "grep"]).
                        If provided, only these commands can be executed. None = allow all.
        denied_commands: Blacklist of denied commands (e.g., ["rm", "dd"]).
                       These commands will be blocked. None = use default dangerous patterns.
        enable_command_filtering: Whether to enable pattern-based command filtering.
                                Defaults to True.
        dangerous_patterns: Custom dangerous command patterns to check. Each pattern is
                          a tuple of (regex_pattern, error_message). If None, uses
                          DEFAULT_DANGEROUS_PATTERNS.
    """
    self.default_timeout = default_timeout

    # Working directory setup
    if workspace_dir is None:
        self.workspace_dir = Path.cwd()
    else:
        self.workspace_dir = Path(workspace_dir).resolve()
        if not self.workspace_dir.exists():
            self.workspace_dir.mkdir(parents=True, exist_ok=True)

    # Path restrictions
    if allowed_paths is None:
        allowed_paths = ["**"]  # Allow all paths within workspace_dir by default
    self.allowed_paths = allowed_paths

    # Command restrictions
    self.allowed_commands = allowed_commands
    self.denied_commands = denied_commands or []

    # Pattern filtering
    self.enable_command_filtering = enable_command_filtering
    self.dangerous_patterns = dangerous_patterns or self.DEFAULT_DANGEROUS_PATTERNS