Execute a bash script in a sandboxed virtual filesystem mounted at the project root. Writes go to an in-memory overlay and do NOT touch the real filesystem unless committed. Network is disabled unless JUST_BASH_NETWORK_ALLOW is set. Supports: cat/cp/ls/find/grep/awk/sed/sort/uniq/jq/sqlite3/xan/yq/tar/tee, optional python3 (CPython WASM) and js-exec (QuickJS) runtimes.

Show the current sandbox state: project root, age, exec count, last script, network policy.

Discard the current sandbox (drops all in-memory writes) and create a fresh one. Use this when you want to start over from the real project state.

Resolve a sandbox path to its real filesystem path (for reading or committing).

Check if a path exists in the sandbox (overlay + real fs).

Run faf migrate on a project directory to upgrade project.faf to the latest schema version. Operates on the REAL filesystem (bypasses the bash sandbox). Modifies project.faf in place.

Run faf sync on a project directory to regenerate CLAUDE.md and other agent docs from project.faf. Operates on the REAL filesystem. May overwrite faf-generated AGENTS.md (use a custom AGENTS.md to keep your own).

Run faf score on a project directory to get a quality report (slot fill %, color). Read-only. Operates on the REAL filesystem.

Run faf-moltbot sync on a project directory to generate SOUL.md with persona + constraints inline. Operates on the REAL filesystem. Overwrites SOUL.md in the project root.