Graphorin API reference v0.7.0
Graphorin API reference / @graphorin/security / / ToolArgumentRule
Interface: ToolArgumentRule
Defined in: packages/security/src/policy/tool-argument-policy.ts:52
A single Progent rule. forbid always beats allow (see module doc).
Properties
| Property | Modifier | Type | Description | Defined in |
|---|---|---|---|---|
effect | readonly | "allow" | "forbid" | - | packages/security/src/policy/tool-argument-policy.ts:53 |
reason? | readonly | string | Human-readable reason surfaced on a forbid match. | packages/security/src/policy/tool-argument-policy.ts:62 |
tool | readonly | string | Tool-name matcher: an exact name, '*' for any, or a trailing-* prefix glob (e.g. 'fs_*'). Matching is case-sensitive. | packages/security/src/policy/tool-argument-policy.ts:58 |
when? | readonly | (facts) => boolean | Optional pure predicate over the call facts (args, sensitivity). | packages/security/src/policy/tool-argument-policy.ts:60 |