Interface: FsAllowOnlyGuardNode
Defined in: core/dist/ast/domain/fs-allow-only-guard-node.d.ts:8
Passive AST node restricting filesystem writes strictly to an allowlist of globs (fs.allowOnly).
Rejects any write effect whose normalized repository-relative path does not match at least one glob pattern in globs (or an active LeaseDelta grant).
Extends
BasePolicyGuardASTNode<"fs:allow-only">
Properties
| Property | Modifier | Type | Description | Inherited from | Defined in |
|---|---|---|---|---|---|
globs | readonly | readonly string[] | Allowed write glob patterns. | - | core/dist/ast/domain/fs-allow-only-guard-node.d.ts:10 |
id | readonly | string | Logical identifier of the guard instance. | BasePolicyGuardASTNode.id | core/dist/ast/base/base-policy-guard-ast-node.d.ts:13 |
type | readonly | "fs:allow-only" | Unique string-literal discriminant of the policy guard node. | BasePolicyGuardASTNode.type | core/dist/ast/base/base-policy-guard-ast-node.d.ts:11 |