Interface: NodeAllowBinariesNode
Defined in: core/dist/ast/domain/node-allow-binaries-node.d.ts:8
Passive AST node restricting subprocess execution to an explicit allowlist of binary names (local.allowBinaries).
Inspects ProcessToolEffect binary names pre-flight and blocks any subprocess command whose executable is not listed in binaries.
Extends
BasePolicyGuardASTNode<"node:allow-binaries">
Properties
| Property | Modifier | Type | Description | Inherited from | Defined in |
|---|---|---|---|---|---|
binaries | readonly | readonly string[] | Allowed executable binary names. | - | core/dist/ast/domain/node-allow-binaries-node.d.ts:10 |
id | readonly | string | Logical identifier of the guard instance. | BasePolicyGuardASTNode.id | core/dist/ast/base/base-policy-guard-ast-node.d.ts:13 |
type | readonly | "node:allow-binaries" | Unique string-literal discriminant of the policy guard node. | BasePolicyGuardASTNode.type | core/dist/ast/base/base-policy-guard-ast-node.d.ts:11 |