Rulvar API reference

---

Rulvar API reference / @rulvar/executor / SubprocessToolInit

Interface: SubprocessToolInit<S>

Defined in: packages/executor/src/subprocess.ts:316

@rulvar/executor: isolated tool executors (RV-216). Reference ToolExecutorProvider adapters that run a tool's work OUT of the engine process, so a tool whose input is hostile or model-generated cannot reach host capabilities the way an in-process tool (an ordinary function call) can.

• subprocessExecutor runs the tool in a child process with a scrubbed environment, an ephemeral workdir, a hard timeout, and bounded output; pair it with a sandbox launcher for filesystem and network isolation.
• containerExecutor runs it in a one-shot container with the network dropped, the filesystem read-only, and resource caps: the isolation the subprocess adapter cannot promise on its own.
• subprocessTool defines a tool that dispatches through them.
• executorConformance is the executable shared-contract battery.

The provider seam itself lives in @rulvar/core (createEngine({ executors })). Docs: https://docs.rulvar.com/guide/isolated-executor.

Type Parameters

Type Parameter
S extends SchemaSpec

Properties

Property	Type	Description	Defined in
args?	readonly string[]	-	packages/executor/src/subprocess.ts:324
command	string	The program to run, and its fixed argv.	packages/executor/src/subprocess.ts:323
description	string	-	packages/executor/src/subprocess.ts:318
name	string	-	packages/executor/src/subprocess.ts:317
needsApproval?	boolean	The terminal permission default asks when true.	packages/executor/src/subprocess.ts:326
parameters	S	-	packages/executor/src/subprocess.ts:319
risk?	ToolRisk	Policy metadata; never identity.	packages/executor/src/subprocess.ts:328
version?	string	Contract version, part of toolsetHash.	packages/executor/src/subprocess.ts:321