pub struct SessionManagedPermissions {
pub allow: Option<Vec<String>>,
pub ask: Option<Vec<String>>,
pub deny: Option<Vec<String>>,
pub disable_bypass_permissions_mode: Option<String>,
}Expand description
Enterprise permission policy expressed with the runtime’s managed permission-rule syntax.
Experimental. This type is part of an experimental wire-protocol surface and may change or be removed in future SDK or CLI releases.
Fields§
§allow: Option<Vec<String>>Permission rules that allow matching operations unless another managed source, deny, or ask rule restricts them.
ask: Option<Vec<String>>Permission rules that require explicit human approval.
deny: Option<Vec<String>>Permission rules that block matching operations. Deny has highest precedence.
disable_bypass_permissions_mode: Option<String>When set to disable, prevents bypass/allow-all permission modes. Advisory auto-approval remains available because normal prompt paths stay active. Any other value is accepted rather than failing the session, but is enforced as disable: the key is only present to restrict something, so a mode this runtime cannot interpret fails closed to the most restrictive one it knows. Omit the key entirely to impose no restriction.