Graphorin API reference v0.9.0
Graphorin API reference / @graphorin/agent / / PermissionHookResult
Interface: PermissionHookResult
Defined in: packages/tools/dist/executor/types.d.ts
E1: verdict returned by a PermissionHook.
Stable
Properties
| Property | Modifier | Type | Description | Defined in |
|---|---|---|---|---|
decision | readonly | "deny" | "ask" | "defer" | "allow" | - | packages/tools/dist/executor/types.d.ts |
reason? | readonly | string | Human-readable reason surfaced on non-allow decisions and audits. | packages/tools/dist/executor/types.d.ts |
updatedInput? | readonly | unknown | Optional raw-shaped replacement args (a sandbox-redirect rewrite). Re-validated against the tool's input schema; on success it replaces BOTH the validated input and the effective args before the approval phase, so the approval gate, the argument policy and the data-flow sink gate all see what will actually run (W-118). A rewrite that fails re-validation fails the call as invalid_input. On a pre-approved resume replay the hook must not rewrite the granted args: a differing updatedInput fails the call instead of executing a payload nobody saw (tools-02). | packages/tools/dist/executor/types.d.ts |