| 1665 | #[napi(object)] |
| 1666 | #[derive(Default)] |
| 1667 | pub struct PermissionPolicy { |
| 1668 | /// Tool invocation patterns that are always denied first. |
| 1669 | pub deny: Option<Vec<String>>, |
| 1670 | /// Tool invocation patterns that are auto-approved. |
| 1671 | pub allow: Option<Vec<String>>, |
| 1672 | /// Tool invocation patterns that always require confirmation. |
| 1673 | pub ask: Option<Vec<String>>, |
| 1674 | /// Default decision when no rule matches: "allow", "deny", or "ask". |
| 1675 | pub default_decision: Option<String>, |
| 1676 | /// Whether this policy is enabled. Defaults to true. |
| 1677 | pub enabled: Option<bool>, |
| 1678 | } |
| 1679 | |
| 1680 | /// Reproducible recipe for a disposable worker/subagent. |
| 1681 | /// |
no outgoing calls