[capabilities.deny]

commands

Typeobject

Lists denied command patterns plus the section-default env-var and network denies that apply across every granted command. Universal network denies that also block non-command surfaces (python, web) live under [security] universal_deny_domains.

domains

Typearray<string>Default[]

Section-default network deny list. Applies as one Grant::NetworkDenyCommandWide per host — fires unconditionally for every granted command’s egress (no pick_best involvement; denies stack), distinct from [security] universal_deny_domains which also blocks non-command surfaces.

env_vars

Typearray<string>Default[]

Universal env-var deny list — stripped from every spawn and rejected on every agent-typed NAME=VALUE prefix.

patterns

Typearray<string | object>

Command patterns to block, or per-command network destinations to deny.

Array items

One entry in [capabilities.deny.commands] patterns.

String form

Typestring

"sw_vers" — block the command unconditionally.

Table form

Typeobject

{ command, domains } — the command may still run (if the allow side grants it) but its network egress is denied to the listed domains in addition to any section-default deny.

command

Typestringrequired

Command pattern to attach network denies to.

domains

Typearray<string>Default[]

Network domains blocked for this command pattern.

read

Typeobject

Combines a default_files list with a paths list to grant the cartesian product. Shorthand paths entries reuse default_files; explicit entries override it.

default_files

Typearray<string>Default[]

File glob shorthand applied to every bare-string paths entry. E.g. ["*.rs", "*.toml"] plus a paths entry "src/**" yields the rules src/**/*.rs and src/**/*.toml.

A bare "*" entry is the catch-all: it matches any file in the path, not just one extension. ["*"] plus paths = ["**"] yields **/* — every file under that root. Use it when the path should cover all file types; use specific extension globs (["*.rs"]) to scope by type.

paths

Typearray<string | object>

Path entries to grant or deny. Bare strings inherit default_files; table entries can specify their own files list.

Array items

One entry in a filesystem capability section’s paths list.

Three shapes, tried in order:

• Shorthand string ("src/**"): inherits default_files, prompt = false.
• Explicit form ({ path, files, prompt? }): fully specified, independent of default_files. files is required.
• Shorthand-with-flags ({ path, prompt? }, no files): inherits default_files. Deny entries do not support prompting, so prompt must be omitted or false.

String form

Typestring

"src/**" — uses the section’s default_files.

Table form

Typeobject

{ path, files, prompt? } — explicit, overrides default_files. files MUST be present here; entries without it are tried as the next variant.

files

Typearray<string>required

File globs under path that this entry grants or denies.

path

Typestringrequired

Path glob this entry applies to, such as src/** or ..

prompt

TypebooleanDefaultfalse

Deny entries do not support prompting; omit this field or leave it false.

Table form

Typeobject

{ path, prompt? } — inherits default_files like the bare string form. Deny entries do not support prompting, so prompt must be omitted or false.

path

Typestringrequired

Path glob this entry applies to, such as src/** or ..

prompt

TypebooleanDefaultfalse

Deny entries do not support prompting; omit this field or leave it false.

write

Typeobject

Combines a default_files list with a paths list to grant the cartesian product. Shorthand paths entries reuse default_files; explicit entries override it.

default_files

Typearray<string>Default[]

File glob shorthand applied to every bare-string paths entry. E.g. ["*.rs", "*.toml"] plus a paths entry "src/**" yields the rules src/**/*.rs and src/**/*.toml.

A bare "*" entry is the catch-all: it matches any file in the path, not just one extension. ["*"] plus paths = ["**"] yields **/* — every file under that root. Use it when the path should cover all file types; use specific extension globs (["*.rs"]) to scope by type.

paths

Typearray<string | object>

Path entries to grant or deny. Bare strings inherit default_files; table entries can specify their own files list.

Array items

One entry in a filesystem capability section’s paths list.

Three shapes, tried in order:

• Shorthand string ("src/**"): inherits default_files, prompt = false.
• Explicit form ({ path, files, prompt? }): fully specified, independent of default_files. files is required.
• Shorthand-with-flags ({ path, prompt? }, no files): inherits default_files. Deny entries do not support prompting, so prompt must be omitted or false.

String form

Typestring

"src/**" — uses the section’s default_files.

Table form

Typeobject

{ path, files, prompt? } — explicit, overrides default_files. files MUST be present here; entries without it are tried as the next variant.

files

Typearray<string>required

File globs under path that this entry grants or denies.

path

Typestringrequired

Path glob this entry applies to, such as src/** or ..

prompt

TypebooleanDefaultfalse

Deny entries do not support prompting; omit this field or leave it false.

Table form

Typeobject

{ path, prompt? } — inherits default_files like the bare string form. Deny entries do not support prompting, so prompt must be omitted or false.

path

Typestringrequired

Path glob this entry applies to, such as src/** or ..

prompt

TypebooleanDefaultfalse

Deny entries do not support prompting; omit this field or leave it false.