fix: make bash tool use external_directory perm