[capabilities.deny]

commands

Typeobject

Lists denied command patterns plus the section-default env-var and network denies that apply across every granted command. Universal network denies that also block non-command surfaces (python, web) live under [security] universal_deny_domains.

domains

Typearray<string>Default[]

Section-default network deny list. Applies as one Grant::NetworkDenyCommandWide per host — fires unconditionally for every granted command’s egress (no pick_best involvement; denies stack), distinct from [security] universal_deny_domains which also blocks non-command surfaces.

env_vars

Typearray<string>Default[]

Universal env-var deny list — stripped from every spawn and rejected on every agent-typed NAME=VALUE prefix.

patterns

Typearray<string | object>

Array items

One entry in [capabilities.deny.commands] patterns.

String form

Typestring

"sw_vers" — block the command unconditionally.

Table form

Typeobject

{ command, domains } — the command may still run (if the allow side grants it) but its network egress is denied to the listed domains in addition to any section-default deny.

command

Typestringrequired

domains

Typearray<string>Default[]

read

Typeobject

Combines a default_files list with a paths list to grant the cartesian product. Shorthand paths entries reuse default_files; explicit entries override it.

default_files

Typearray<string>Default[]

File glob shorthand applied to every bare-string paths entry. E.g. ["*.rs", "*.toml"] plus a paths entry "src/**" yields the rules src/**/*.rs and src/**/*.toml.

paths

Typearray<string | object>

Path globs. Each entry is one of [RawPathEntry]‘s variants.

Array items

One entry in a filesystem capability section’s paths list.

Three shapes, tried in order:

• Shorthand string ("src/**"): inherits default_files, prompt = false.
• Explicit form ({ path, files, prompt? }): fully specified, independent of default_files. files is required.
• Shorthand-with-flags ({ path, prompt? }, no files): inherits default_files. Only useful with prompt = true; bare { path = "x" } has no advantage over the string form.

String form

Typestring

"src/**" — uses the section’s default_files.

Table form

Typeobject

{ path, files, prompt? } — explicit, overrides default_files. files MUST be present here; entries without it are tried as the next variant.

files

Typearray<string>required

path

Typestringrequired

prompt

TypebooleanDefaultfalse

Table form

Typeobject

{ path, prompt? } — inherits default_files like the bare string form but adds the prompt flag.

path

Typestringrequired

prompt

TypebooleanDefaultfalse

write

Typeobject

Combines a default_files list with a paths list to grant the cartesian product. Shorthand paths entries reuse default_files; explicit entries override it.

default_files

Typearray<string>Default[]

File glob shorthand applied to every bare-string paths entry. E.g. ["*.rs", "*.toml"] plus a paths entry "src/**" yields the rules src/**/*.rs and src/**/*.toml.

paths

Typearray<string | object>

Path globs. Each entry is one of [RawPathEntry]‘s variants.

Array items

One entry in a filesystem capability section’s paths list.

Three shapes, tried in order:

• Shorthand string ("src/**"): inherits default_files, prompt = false.
• Explicit form ({ path, files, prompt? }): fully specified, independent of default_files. files is required.
• Shorthand-with-flags ({ path, prompt? }, no files): inherits default_files. Only useful with prompt = true; bare { path = "x" } has no advantage over the string form.

String form

Typestring

"src/**" — uses the section’s default_files.

Table form

Typeobject

{ path, files, prompt? } — explicit, overrides default_files. files MUST be present here; entries without it are tried as the next variant.

files

Typearray<string>required

path

Typestringrequired

prompt

TypebooleanDefaultfalse

Table form

Typeobject

{ path, prompt? } — inherits default_files like the bare string form but adds the prompt flag.

path

Typestringrequired

prompt

TypebooleanDefaultfalse