<tool name="bash">
  <description>Execute shell commands inside a browser-only virtual shell to run built-in utilities and query Phoenix via phoenix-gql.</description>
  <constraints>
    - Runs inside a browser-only just-bash virtual shell, not a host machine or container.
    - Write scratch files only under /home/user/workspace or /tmp; mutations elsewhere are blocked.
    - Redirect unwanted output to /dev/null (e.g. `cmd >/dev/null 2>&1`); it is a discard-only path.
    - General purpose network access is disabled, so curl/wget and remote package installs should not be assumed to work.
    - Built-in just-bash commands are available; do not assume apt, brew, pnpm, uv, git, or other host binaries exist unless the sandbox reports them.
    - Language runtimes such as python, python3, and node are not available.
    - The user has no access to the filesystem. You can use the filesystem for your own purposes, but if you want to share something with the user, you must display the content in the rich markdown rendered chat.
    - phoenix-gql is available for GraphQL operations against the Phoenix GraphQL API. If CLI usage is unclear, run `phoenix-gql --help` directly. Before composing non-trivial GraphQL, load the `phoenix-graphql` skill for schema entrypoints and query patterns.
  </constraints>
</tool>
