Skip to content

[I] PermissionSet

The normalized, aggregated view of a set of permissions. This is the canonical form used to compute grants (intersection of requested and approved) and to detect missing permissions for diagnostics.

PropertyModifierTypeDescription
envreadonlyreadonly string[]Environment variable names that may be read.
execreadonlyboolean | readonly string[]Child-process capability. false = no exec; true = any command; string[] = only the listed commands.
fsReadreadonlyreadonly string[]Path scopes readable from the file system.
fsWritereadonlyreadonly string[]Path scopes writable on the file system.
networkreadonlyreadonly string[]Network host patterns that may be contacted.