Why Go
- Case Studies
  
  Common problems companies solve with Go
- Use Cases
  
  Stories about how and why companies use Go
- Security
  
  How Go can help keep you secure by default
Learn
Docs
- Effective Go
  
  Tips for writing clear, performant, and idiomatic Go code
- Go User Manual
  
  A complete introduction to building software with Go
- Standard library
  
  Reference documentation for Go's standard library
- Release Notes
  
  Learn what's new in each Go release
Packages
Community
- Recorded Talks
  
  Videos from prior events
- Meetups
  
  Meet other local Go developers
- Conferences
  
  Learn and network with Go developers from around the world
- Go blog
  
  The Go project's official blog.
- Go project
  
  Get help and stay informed from Go
- Get connected

exec

package

Go to main page

Versions in this module

v0

v0.7.0

Apr 13, 2026

Changes in this version

+ func BuildTools(ex Executor, guardFns ...GuardFunc) []*agent.Tool

+ func WithPolicy(pe *PolicyEvaluator) toolchain.Middleware

+ type BlockedResult struct

+ Blocked bool

+ Message string

type Config

+ Bus *eventbus.Bus

+ ExcludedCommands []string

+ FailClosed bool

+ OSIsolator sandboxos.OSIsolator

+ SandboxPolicy sandboxos.Policy

+ type EventPublisher interface

+ Publish func(event PolicyEvent)

+ type Executor interface

+ ExecuteTool func(ctx context.Context, cmd string) (string, error)

+ GetBackgroundStatus func(id string) (map[string]interface{}, error)

+ StartBackground func(cmd string) (string, error)

+ StopBackground func(id string) error

+ type GuardFunc func(cmd string) string

+ type Option func(*PolicyEvaluator)

+ func WithCatastrophicPatterns(patterns []string) Option

+ type PolicyDecision struct

+ Command string

+ Message string

+ Reason ReasonCode

+ Unwrapped string

+ Verdict Verdict

+ type PolicyDecisionData struct

+ AgentName string

+ Command string

+ Message string

+ Reason string

+ SessionKey string

+ Unwrapped string

+ Verdict string

+ func (e PolicyDecisionData) EventName() string

+ type PolicyEvaluator struct

+ func NewPolicyEvaluator(guard *CommandGuard, classifier func(cmd string) (string, ReasonCode), ...) *PolicyEvaluator

+ func (pe *PolicyEvaluator) Evaluate(cmd string) PolicyDecision

+ type PolicyEvent interface

+ EventName func() string

+ type ReasonCode string

+ const ReasonCatastrophicPattern

+ const ReasonCmdSubstitution

+ const ReasonEncodedPipe

+ const ReasonEvalVerb

+ const ReasonFindExecInner

+ const ReasonGroupedSubshell

+ const ReasonHeredoc

+ const ReasonKillVerb

+ const ReasonLangoCLI

+ const ReasonNone

+ const ReasonProcessSubst

+ const ReasonProtectedPath

+ const ReasonShellFunction

+ const ReasonSkillImport

+ const ReasonUnsafeVarExpand

+ const ReasonXargsInner

type Tool

+ func (t *Tool) SetEventBus(bus *eventbus.Bus)

+ type Verdict int

+ const VerdictAllow

+ const VerdictBlock

+ const VerdictObserve

+ func (v Verdict) String() string

v0.6.0

Mar 17, 2026

Changes in this version

+ type CommandGuard struct

+ func NewCommandGuard(protectedPaths []string) *CommandGuard

+ func (g *CommandGuard) CheckCommand(command string) (blocked bool, reason string)

v0.5.0

Mar 9, 2026

v0.4.0

Mar 5, 2026

v0.3.0

Feb 28, 2026

Changes in this version

+ type BackgroundProcess struct

+ Cmd *exec.Cmd

+ Command string

+ Done bool

+ Error string

+ ExitCode int

+ ID string

+ Output *syncBuffer

+ StartTime time.Time

+ type Config struct

+ AllowBackground bool

+ DefaultTimeout time.Duration

+ EnvFilter []string

+ EnvWhitelist []string

+ Refs *security.RefStore

+ WorkDir string

+ type Result struct

+ ExitCode int

+ Stderr string

+ Stdout string

+ TimedOut bool

+ type Tool struct

+ func New(cfg Config) *Tool

+ func (t *Tool) Cleanup()

+ func (t *Tool) GetBackgroundStatus(id string) (*BackgroundProcess, error)

+ func (t *Tool) ListBackground() []*BackgroundProcess

+ func (t *Tool) Run(ctx context.Context, command string, timeout time.Duration) (*Result, error)

+ func (t *Tool) RunWithPTY(ctx context.Context, command string, timeout time.Duration) (*Result, error)

+ func (t *Tool) StartBackground(command string) (string, error)

+ func (t *Tool) StopBackground(id string) error