Interface: FsWriteGuardNode
Defined in: core/dist/ast/domain/fs-write-guard-node.d.ts:8
Passive AST node enforcing glob-based write allow/deny rules (fs.writeGuard).
Projects violatedEffects strictly to paths matching denyGlobs and not covered by allowGlobs or active LeaseDelta grants.
Extends
BasePolicyGuardASTNode<"fs:write-guard">
Properties
| Property | Modifier | Type | Description | Inherited from | Defined in |
|---|---|---|---|---|---|
allowGlobs? | readonly | readonly string[] | Optional glob patterns exempted from denyGlobs. | - | core/dist/ast/domain/fs-write-guard-node.d.ts:12 |
denyGlobs | readonly | readonly string[] | Glob patterns denying write mutations. | - | core/dist/ast/domain/fs-write-guard-node.d.ts:10 |
id | readonly | string | Logical identifier of the guard instance. | BasePolicyGuardASTNode.id | core/dist/ast/base/base-policy-guard-ast-node.d.ts:13 |
onlyExistingAtBaseRef? | readonly | boolean | When true, blocks only paths that already existed at handle.baseRef. | - | core/dist/ast/domain/fs-write-guard-node.d.ts:14 |
type | readonly | "fs:write-guard" | Unique string-literal discriminant of the policy guard node. | BasePolicyGuardASTNode.type | core/dist/ast/base/base-policy-guard-ast-node.d.ts:11 |