Graphorin API reference v0.15.1
Graphorin API reference / @graphorin/security / / ToolArgumentRule
Interface: ToolArgumentRule
Defined in: packages/security/src/policy/tool-argument-policy.ts:82
A single Progent rule. deny/forbid always beats allow (see module doc).
Properties
| Property | Modifier | Type | Description | Defined in |
|---|---|---|---|---|
effect | readonly | ToolRuleEffect | - | packages/security/src/policy/tool-argument-policy.ts:83 |
reason? | readonly | string | Human-readable reason surfaced on a non-allow match. | packages/security/src/policy/tool-argument-policy.ts:92 |
tool | readonly | string | Tool-name matcher: an exact name, '*' for any, or a trailing-* prefix glob (e.g. 'fs_*'). Matching is case-sensitive. | packages/security/src/policy/tool-argument-policy.ts:88 |
when? | readonly | (facts) => boolean | Optional pure predicate over the call facts (args, sensitivity). | packages/security/src/policy/tool-argument-policy.ts:90 |