optional approvalTimeout: number;

args: string[];

optional auditPath: string;

command: string;

optional defaultAction: "allow" | "prompt" | "deny";

optional dryRun: boolean;

optional env: Record<string, string>;

optional failureMode: FailureMode;