{"version":"2.1.195","anchor":"deny-ask-rules-for-tool-input-parameters","canonical_anchor":"deny-ask-rules-for-tool-input-parameters","heading":"Deny\/Ask Rules for Tool Input Parameters","tier":null,"area":null,"scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.195\/e\/deny-ask-rules-for-tool-input-parameters","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.195","markdown":"### Deny\/Ask Rules for Tool Input Parameters\n\n**What**\n\nPermission rules now support matching on a specific tool input parameter value, allowing fine-grained auto-handling without a blanket allow.\n\n**Details**\n\n- Example rules: `deny Agent(model:opus)` or `ask Bash(run_in_background:true)`.\n- Tip: \"Deny and ask rules can match a tool input parameter \u2014 e.g., deny Agent(model:opus) or ask Bash(run_in_background:true) \u2014 so that specific pattern is auto-handled without prompting each time.\"\n- The `\/permissions` panel guidance also updated to reference this syntax.\n\n**Evidence**\n\nNew permissions tip (search for `\"Deny and ask rules can match a tool input parameter\"`, `\"\/permissions, then add a Tool(param:value) deny or ask rule\"`)"}