Add BashTool for executing system commands with permissions

[ItsBarryZ]

• Implements configurable bash command execution tool
• Supports granular permission control via allowed/denied commands
• Allows directory restrictions and feature toggles (pipes, redirects)
• Follows agents framework pattern with dynamic tool descriptions
• Includes proper async execution with timeout support

[etd-23]

Type Hints

Add Optional for nullable fields:

from typing import List, Optional

allowed_commands: Optional[List[str]] = field(default=None)
working_directories: Optional[List[str]] = field(default=None)

Security Issue

The startswith() check can be bypassed. If "ls" is allowed, "ls && rm -rf /" passes validation.

Consider exact matching or using shlex:

import shlex

def _is_command_allowed(self, command: str) -> bool:
    try:
        parsed = shlex.split(command)
        base_command = parsed[0] if parsed else ""
    except ValueError:
        return False
    
    if self.allowed_commands:
        return base_command in self.allowed_commands

[etd-23]

mostly claude-code suggestions above. A little nit-picky on the typing, but agreed on the security point

[rgb-prithvi]

LGTM for the most part, but maybe we should add a small change to the notebook and / or documentation to highlight the tool and show it in action? otherwise I doubt most folks will see this