Function: evaluateNodeAllowBinariesGuard()

function evaluateNodeAllowBinariesGuard(
   node, 
   input, 
   _ctx
): PolicyGuardEvaluationResult;

Defined in: node/src/executors/node-guard-executors.ts:26

Evaluates a NodeAllowBinariesNode (type: 'node:allow-binaries') policy guard against proposed tool effects.

Inspects subprocess/command ToolEffect entries and rejects any invocation whose binary name or basename is not present in node.binaries.

Parameters

Parameter	Type	Description
node	NodeAllowBinariesNode	Passive allow-binaries policy guard AST node.
input	PolicyGuardEvaluationInput	Tool name, proposed effects, and active capability leases.
_ctx	StepExecutionContext	Active step execution context.

Returns

PolicyGuardEvaluationResult

Guard evaluation result and any violated subprocess effects.