Module bash 

bash tool kit (§7.5). Runs shell commands in the workspace directory.

M1a: straightforward subprocess exec with stdout/stderr capture and optional timeout. Not sandboxed — callers should pair this with ApprovalChannel or a custom ToolPolicy for anything beyond local research. The full threat model, what’s mitigated here vs. what isn’t, and deployer recommendations live in docs/security.md.

Structs

BashTool

A single-tool ToolSet exposing bash.