The Commonplace
Home Three-study pilot Papers Evidence Explore Trends Syntheses Digests References Docs 🎲 Workforce Futures
← Papers
Direction, evidence grade, and study type are AI-generated labels (gpt-5-mini), not human-verified. Syntheses are LLM-written. "Tensions" are machine-detected candidates, not confirmed contradictions. A research-acceleration tool, not peer review. How this is built →

Shell-only orchestration outperforms typed tool catalogs in simulated enterprise agent tasks: bash-only agents score substantially higher and use fewer tokens/costs than direct typed-tool interfaces, while programmatic tool calling reduces tokens but usually trails bash in quality; where arbitrary execution is feasible use shell, otherwise prefer catalog-restricted programs for compliance.

Is Bash All You Need? An Empirical Study of Tool Interfaces for Enterprise Digital Worker Agents
Hazel Mak, Susheel Suresh, Sahil Bhatnagar, Barry Wang, Chhaya Methani, Alejandro Gutierrez Munoz · September 10, 2026
arxiv quasi_experimental medium evidence 8/10 relevance Full text usable extracted full text Source PDF

Structured author observations

Linked only from stored provider relations; the raw author line above is never matched by name.

Arxiv

Latest observation:

  1. Hazel Mak unresolved corpus identity
  2. Susheel Suresh unresolved corpus identity
  3. Sahil Bhatnagar unresolved corpus identity
  4. Barry Wang unresolved corpus identity
  5. Chhaya Methani unresolved corpus identity
  6. Alejandro Gutierrez Munoz unresolved corpus identity

Semantic Scholar

Latest observation:

  1. Hazel Mak provider ID
  2. Susheel Suresh provider ID
  3. Sahil Bhatnagar provider ID
  4. Barry Wang provider ID
  5. Chhaya Methani provider ID
  6. Alejandro Gutierrez Munoz provider ID
Across two enterprise benchmarks and two frontier LLMs, a shell-only (bash) interface yielded higher task scores and lower token/cost usage than typed-tool-only and programmatic tool-calling interfaces, while adding typed or synthesized persistent tools to bash produced no consistent quality gain.

Citation observations

Cumulative provider counts captured on specific dates; providers are never combined.

In this study, we examine whether a general shell can outperform specialized tools on enterprise tasks. Shell-based agents have shown strong results in coding, but enterprise work also involves moving between applications and services, coordinating with coworkers, and performing professional analysis. We compare five tool interfaces on TheAgentCompany and APEX-Agents using Opus-4.8 and GPT-5.5: typed tools, typed tools plus bash, bash alone, bash with persistent agent-synthesized tools, and programmatic tool calling (PTC), which runs programs whose actions are restricted to a typed tool catalog. Bash alone outperforms typed tools on both benchmarks, improving score by 21.8-24.5 pp on TheAgentCompany and 4.8-7.4 pp on APEX-Agents while using 19-72% fewer total tokens. Adding typed tools or persistent tool synthesis to bash produces no detectable pooled score gain. PTC uses fewer tokens than direct typed calls with broadly similar task performance, but generally underperforms bash alone in both quality and cost efficiency. For enterprise practitioners, these results favor bash alone when arbitrary execution can be isolated and PTC when security or compliance policies require a fixed tool catalog.

Summary

Main Finding

Bash-only (shell-based) agents outperform typed-tool-only agents on two realistic enterprise benchmarks while using substantially fewer tokens and often lower estimated inference cost. Adding typed tools or persistent synthesized tools to a bash-capable agent yields no consistent quality gain. Programmatic tool calling (PTC) reduces token use versus direct typed calls but generally underperforms bash alone in both task quality and token/cost efficiency. Practical recommendation: use bash-only when arbitrary execution can be safely isolated; use PTC when security/compliance requires a fixed catalog.

Key Points

  • Interfaces compared (same model, prompts, stopping rules):
    • Tool-only (typed catalog calls)
    • Bash+Tool (both shell and typed catalog)
    • Bash (shell-only)
    • Bash+Synthesis (shell + persistent agent-authored tools)
    • Programmatic Tool Calling (PTC): programs over a restricted typed catalog
  • Benchmarks and models: TheAgentCompany (software-company workflows) and APEX-Agents (investment banking / consulting / law); evaluated with Opus-4.8 and GPT-5.5.
  • Core quantitative outcomes (pooled comparisons):
    • Bash improved score vs Tool-only by ~21.8–24.5 percentage points on TheAgentCompany and ~4.8–7.4 pp on APEX-Agents (model-dependent).
    • Bash used 19–72% fewer total tokens than Tool-only (varies by benchmark/model).
    • Adding typed or synthesized tools to bash produced no detectable pooled score improvement.
    • PTC saved tokens relative to Tool-only but typically scored below Bash and had lower tool-call success rates.
  • Task-type sensitivity: bash advantage is larger on TheAgentCompany (coding / cross-application workflows) than on APEX-Agents (document-heavy professional analysis), suggesting flexible execution helps more where many small interactions or cross-application orchestration are needed.
  • Model differences: Opus-4.8 tends to favor shell-based execution for higher absolute quality (at higher token cost); GPT-5.5 is more token-efficient for direct typed-tool calls.
  • Tool synthesis: agents often create reusable tools and invoke them, but reuse does not reliably improve success rates or task scores; synthesized tools shorten invocations but do not deliver consistent quality benefits.
  • Shell behavior: agents compose short shell commands heavily (pipes, subshells) and bundle repeated operations into single shell steps, reducing the number and token-cost of explicit tool calls.

Data & Methods

  • Experimental design: controlled interface ablation holding model, task text, base prompt, and stopping criteria constant; interface-specific prompts only for synthesis and PTC. Paired task-model comparisons were used.
  • Benchmarks:
    • TheAgentCompany: simulated software company environment; authors constructed a 60-tool typed catalog for the benchmark’s 174 tasks; coworker agents simulated and patched for reliability issues.
    • APEX-Agents: professional analysis across domains; evaluated 480 tasks using an Archipelago snapshot with 20 typed application tools; the code-execution server acted as a guarded Unix shell.
  • Models: Opus-4.8 and GPT-5.5 at default reasoning levels.
  • PTC implementation: Python programs run in a restricted runtime exposing only the typed catalog functions (no shell or other action channels).
  • Bash+Synthesis: persistent directory available; prompts encourage packaging reusable tools for later tasks.
  • Metrics:
    • Quality: effort-weighted checkpoint rate (TheAgentCompany) and mean rubric score (APEX-Agents); pass rate (fully solved fraction). Bootstrap 95% CIs reported.
    • Resource use: token counts (input, output, cache-read, total), estimated $/task using GitHub Copilot list rates, wall-clock minutes/task.
    • Operational metrics: tool calls per task, tool-call tokens, call success rates, repetition rates, shell command composition, lines of code, tool-synthesis creation and reuse statistics.
  • Sample quantitative examples from Table 1 (illustrative):
    • TheAgentCompany (Opus-4.8): Tool-only score 44.9% -> Bash 69.4%; total tokens/task: Tool-only ~945k -> Bash ~264k; estimated $/task: $1.20 -> $0.37.
    • APEX-Agents (GPT-5.5): Tool-only score 39.8% -> Bash 44.6%; tokens/task: Tool-only ~328k -> Bash ~176k; estimated $/task: $0.52 -> $0.40.
  • Analysis slices: per-task paired differences by difficulty proxy (Tool-only call count), tool-call composition and failures, reuse & effectiveness of synthesized tools, PTC vs Tool-only token composition.

Implications for AI Economics

  • Cost-effectiveness and operating cost:
    • Shell-based orchestration can meaningfully reduce inference-token consumption and (in these experiments) estimated inference cost per task relative to typed-tool-only interfaces—sometimes dramatically (example Opus TheAgentCompany). Savings scale with task volume, so a per-task token/cost reduction can translate to large operational savings for enterprises running many automated workflows.
    • PTC reduces context (uncached input and cache-read) tokens versus direct typed calls, so when catalog constraints are required, PTC is a cost-efficient alternative relative to naïve tool calling—though still often worse than shell-only when shell is allowed.
  • Productivity and task quality:
    • The superior quality of bash-only on workflow-heavy tasks suggests higher end-user utility and lower downstream human revision costs in domains requiring cross-application orchestration or many small operations. That implies higher effective labor substitution per dollar spent in these scenarios.
  • Deployment trade-offs and compliance:
    • Arbitrary code execution (bash) increases operational risk (security, data exfiltration, compliance). Where such risks are unacceptable, PTC or typed-catalog approaches provide constrained, auditable action surfaces even if they are somewhat less effective than unrestricted shell.
    • Economic decisions must therefore trade direct inference cost and quality against risk-management costs (sandboxing, auditing, human-in-the-loop review) required to permit shell execution.
  • Platform design and product strategy:
    • Enterprise automation platforms should expose multiple interface modes (shell, typed tool calls, programmatic/catalognized programs) and let customers choose by risk profile and workload. Providing turnkey isolation/sandboxing for shell execution would make the most cost-effective mode accessible to more customers.
    • Enterprises should consider in-house A/B testing of interface/model combinations on representative workflows to quantify real-world ROI (quality improvements, token/inference cost, human-revision time) before large-scale adoption.
  • Model & future-proofing considerations:
    • Recommendations are model- and time-dependent. Providers and buyers should re-evaluate as models evolve: what is optimal for Opus-4.8 and GPT-5.5 (June 2026 snapshot) may change with newer LLM families or fine-tuned tool-use capabilities.
  • Limitations affecting economic extrapolation:
    • Results come from two benchmarks and two models; catalog construction, environment patches, and specific guardrails affect generalizability. Security and engineering costs to safely run shell agents are nontrivial and must be included in economic analyses.
  • Bottom-line guidance for decision-makers:
    • If you can safely sandbox arbitrary execution: prioritize shell-based agents for higher quality and lower inference costs on cross-application/coding-style workflows.
    • If you must restrict actions for compliance: use PTC (programs over a fixed typed catalog) to regain some token efficiency and chaining benefits while keeping an auditable, constrained action surface.
    • Run targeted A/B tests to quantify your actual task mix, token cost, revision overhead, and security-cost trade-offs before committing to a single interface at scale.

Assessment

Paper Typequasi_experimental Evidence Strengthmedium — The paper reports systematic, repeated evaluations across two public enterprise-style benchmarks, two frontier LLMs, and many tasks with bootstrap CIs and paired comparisons, giving credible evidence about interface differences in this simulated setting; however the evidence is not from field deployments with real end users, depends on benchmark and implementation choices (constructed tool catalog, patched simulated coworkers), and may not generalize across models, datasets, or production constraints. Methods Rigormedium — Design uses careful controlled ablations, multiple benchmarks and models, paired analyses, and uncertainty quantification (bootstrap CIs). Weaknesses include reliance on simulated environments and patched components, a researcher-constructed typed-tool catalog (possible implementation choices bias), only two model families at default reasoning settings, and no deployment/real-user validation. SampleEvaluations run on two enterprise-style benchmarks: TheAgentCompany (software-company workflows; 174 evaluated tasks across coding and cross-application workflows with 60 researcher-constructed typed tools) and APEX-Agents (professional analysis across investment banking, consulting, and corporate law; 480 tasks using a June 2026 Archipelago snapshot with 20 typed application tools). Two LLMs (Opus-4.8 and GPT-5.5) were evaluated at default reasoning levels; simulated coworkers in TheAgentCompany were implemented with GPT-5 and patched for reliability; metrics include effort-weighted checkpoint rate or rubric score, pass rate, token counts (input/output/cache-read/total), estimated $/task, time/task, and various tool-call and shell-use diagnostics. Themesproductivity org_design IdentificationControlled within-benchmark, within-model ablation: the authors hold model, task text, base prompt and stopping criteria constant and compare five tool-interface conditions (Tool-only, Bash+Tool, Bash, Bash+Synthesis, PTC) across tasks; paired task-model comparisons and bootstrap 95% CIs are used to estimate interface effects. GeneralizabilityBenchmarks are simulated and may not reflect real-world enterprise workflows or user behavior., Authors constructed the typed-tool catalog for TheAgentCompany and patched simulated coworkers, so results may depend on implementation choices., Only two model families (Opus-4.8, GPT-5.5) at default settings were tested; newer or different models could change rankings., Security, compliance, and system-integration constraints in production (e.g., restricted execution environments, data governance) may favor typed catalogs regardless of benchmark scores., Tasks and data snapshots (APEX June 2026) limit temporal generalizability; available external APIs/data were restricted., Cost estimates use specific inference pricing and may not generalize across deployment pricing models or on-prem setups.

Claims (9)

ClaimDirectionOutcomeConfidence & EvidenceDetails
On TheAgentCompany, Bash alone outperformed Tool-only by 21.8–24.5 percentage points in task score across the two evaluated models. Task Completion Time positive TheAgentCompany task score, defined as effort-weighted checkpoint rate
Reading fidelity high
Study strength high
n=174
21.8–24.5 percentage-point increase
0.8
On APEX-Agents, Bash alone outperformed Tool-only by 4.8–7.4 percentage points in task score across the two evaluated models. Output Quality positive APEX-Agents mean rubric score
Reading fidelity high
Study strength high
n=480
4.8–7.4 percentage-point increase
0.8
Bash alone used fewer total tokens than Tool-only across both benchmarks and models, with reductions ranging from 19% to 72%. Organizational Efficiency positive Total inference tokens per task
Reading fidelity high
Study strength high
n=654
19–72% fewer total tokens
0.8
Adding typed tools to Bash did not produce a detectable pooled task-score improvement. Output Quality null_result Paired task score
Reading fidelity high
Study strength medium
n=654
0.48
Adding persistent synthesized tools to Bash did not produce a detectable pooled task-score improvement. Output Quality null_result Task score difference between Bash+Synthesis and Bash
Reading fidelity high
Study strength medium
n=1308
Median difference: 0.0 pp across all reported subsets
0.48
Programmatic tool calling used fewer tokens than direct typed-tool calling while achieving broadly similar or slightly lower task performance, depending on the benchmark and model. Organizational Efficiency mixed Task score and total token use
Reading fidelity high
Study strength high
n=654
PTC reduced uncached input by 97.6k tokens on TheAgentCompany and 45.4k on APEX-Agents relative to Tool-only
0.8
PTC underperformed Bash alone in task score across all benchmark-model combinations reported. Output Quality negative Benchmark task score
Reading fidelity high
Study strength high
n=654
Bash advantage of 7.8–21.0 percentage points
0.8
Bash reduced the number of tool calls and tool-call tokens relative to Tool-only, with the reduction in tool-call tokens exceeding half on TheAgentCompany. Organizational Efficiency positive Median tool calls and tool-call tokens per task
Reading fidelity high
Study strength high
n=654
54.1% fewer tool-call tokens on TheAgentCompany; 33.3% fewer on APEX-Agents
0.8
PTC had the lowest tool-call success rate among the compared interfaces on both benchmarks. Error Rate negative Tool-call success rate
Reading fidelity high
Study strength high
n=654
65.2% success on TheAgentCompany and 86.2% on APEX-Agents
0.8

Notes