Skip to content

Graphorin API reference v0.15.1


Graphorin API reference / @graphorin/security / / ToolArgumentRule

Interface: ToolArgumentRule

Defined in: packages/security/src/policy/tool-argument-policy.ts:82

A single Progent rule. deny/forbid always beats allow (see module doc).

Properties

PropertyModifierTypeDescriptionDefined in
effectreadonlyToolRuleEffect-packages/security/src/policy/tool-argument-policy.ts:83
reason?readonlystringHuman-readable reason surfaced on a non-allow match.packages/security/src/policy/tool-argument-policy.ts:92
toolreadonlystringTool-name matcher: an exact name, '*' for any, or a trailing-* prefix glob (e.g. 'fs_*'). Matching is case-sensitive.packages/security/src/policy/tool-argument-policy.ts:88
when?readonly(facts) => booleanOptional pure predicate over the call facts (args, sensitivity).packages/security/src/policy/tool-argument-policy.ts:90