@sema-agent/sdk 16.2.0 → 16.3.0

package/dist/resources/tasks.d.ts

@@ -33,7 +33,13 @@ export declare class TasksResource {
      *  不进 `NON_RETRYABLE_CODES`):`config.invalid_checkpoint_store`(**400**,部署声明的检查点店坐标无效)· `rewind.child_scope_unsupported`(**422**,
      *  rewind 不能落在委派子代的作用域上)· `rewind_snapshot.unresolvable`(**422**,配 `restoreFiles` 时目标自己没有文件历史边界;后两码本包早已在,本版才进 server 的登记表)。
      *  另:`config.user_invoked_skill_unknown`(**400**)= 顶层 `userInvokedSkills` 点了这一 run 没装的技能(见 {@link TaskRequest.userInvokedSkills};同步腿 400,
-     *  异步 / 活流腿落终态 run 行同码)。 */
+     *  异步 / 活流腿落终态 run 行同码)。
+     *
+     *  🔴 **server ≥7.117.0 的新码 / 新拒**(同样按 `errorCode` 分支,不自动重试):
+     *  · `config.image_invalid`(**400**,带码裸 `APIError`,`config.` 不是前缀族)—— 请求内联图片(`images[]` 的 `{ data, mimeType }` 臂)过不了引擎的字节准入:类型不在 `image/png` / `jpeg` / `gif` / `webp`、字节与声明类型的签名不符、
+     *    解码后超 5 MiB;`error` 以 `TaskSpec.images: ` 起;第一次模型调用之前拒(见 {@link TaskRequest.images});base64 串本身超 5 242 880 字符是另一个码(**413** `request.payload_too_large`);
+     *  · 设置编译拒的 **422**(`settings.permissions.{allow,deny,ask}` 里退役名 / 短名 / 协议名铸不出)—— `error` 句首换成 `request settings cannot be applied as written: `,按 `errorCode` `request.unprocessable` 分支(见 `SettingsPermissions.allow`);
+     *  · 技能 `disallowedTools` 里引擎读成空的条目 ⇒ **400** `request.field_invalid`(见 `SkillSpec.disallowedTools`;续跑同判 409 `resume_blocked_by_policy`)。 */
     submit(req: TaskRequest, opts?: {
         idempotencyKey?: string | null;
         signal?: AbortSignal;

package/dist/resources/tasks.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tasks.d.ts","sourceRoot":"","sources":["../../src/resources/tasks.ts"],"names":[],"mappings":"AAAA;;iEAEiE;AACjE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EAAE,gBAAgB,EAAE,WAAW,EAAiB,MAAM,aAAa,CAAC;AAChF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAG/C,qBAAa,aAAa;IACZ,OAAO,CAAC,QAAQ,CAAC,CAAC;gBAAD,CAAC,EAAE,SAAS;IAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;gCA0B4B;IACtB,MAAM,CAAC,GAAG,EAAE,WAAW,EAAE,IAAI,CAAC,EAAE;QAAE,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAW1H;;;;;8GAK0G;IACpG,SAAS,CAAC,GAAG,EAAE,WAAW,EAAE,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,GAAG,OAAO,CAAC,QAAQ,CAAC;IAevJ;;;;;;;;;;;;sGAYkG;IAC3F,MAAM,CAAC,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE;QAAE,WAAW,EAAE,IAAI,CAAC;QAAC,MAAM,CAAC,EAAE,WAAW,CAAC;QAAC,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,QAAQ,KAAK,IAAI,CAAC;QAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,GAAG,cAAc,CAAC,UAAU,CAAC;CAqBlP"}
+{"version":3,"file":"tasks.d.ts","sourceRoot":"","sources":["../../src/resources/tasks.ts"],"names":[],"mappings":"AAAA;;iEAEiE;AACjE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EAAE,gBAAgB,EAAE,WAAW,EAAiB,MAAM,aAAa,CAAC;AAChF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAG/C,qBAAa,aAAa;IACZ,OAAO,CAAC,QAAQ,CAAC,CAAC;gBAAD,CAAC,EAAE,SAAS;IAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iJAgC6I;IACvI,MAAM,CAAC,GAAG,EAAE,WAAW,EAAE,IAAI,CAAC,EAAE;QAAE,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAW1H;;;;;8GAK0G;IACpG,SAAS,CAAC,GAAG,EAAE,WAAW,EAAE,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,GAAG,OAAO,CAAC,QAAQ,CAAC;IAevJ;;;;;;;;;;;;sGAYkG;IAC3F,MAAM,CAAC,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE;QAAE,WAAW,EAAE,IAAI,CAAC;QAAC,MAAM,CAAC,EAAE,WAAW,CAAC;QAAC,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,QAAQ,KAAK,IAAI,CAAC;QAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,GAAG,cAAc,CAAC,UAAU,CAAC;CAqBlP"}

package/dist/resources/tasks.js

@@ -30,7 +30,13 @@ export class TasksResource {
      *  不进 `NON_RETRYABLE_CODES`):`config.invalid_checkpoint_store`(**400**,部署声明的检查点店坐标无效)· `rewind.child_scope_unsupported`(**422**,
      *  rewind 不能落在委派子代的作用域上)· `rewind_snapshot.unresolvable`(**422**,配 `restoreFiles` 时目标自己没有文件历史边界;后两码本包早已在,本版才进 server 的登记表)。
      *  另:`config.user_invoked_skill_unknown`(**400**)= 顶层 `userInvokedSkills` 点了这一 run 没装的技能(见 {@link TaskRequest.userInvokedSkills};同步腿 400,
-     *  异步 / 活流腿落终态 run 行同码)。 */
+     *  异步 / 活流腿落终态 run 行同码)。
+     *
+     *  🔴 **server ≥7.117.0 的新码 / 新拒**(同样按 `errorCode` 分支,不自动重试):
+     *  · `config.image_invalid`(**400**,带码裸 `APIError`,`config.` 不是前缀族)—— 请求内联图片(`images[]` 的 `{ data, mimeType }` 臂)过不了引擎的字节准入:类型不在 `image/png` / `jpeg` / `gif` / `webp`、字节与声明类型的签名不符、
+     *    解码后超 5 MiB;`error` 以 `TaskSpec.images: ` 起;第一次模型调用之前拒(见 {@link TaskRequest.images});base64 串本身超 5 242 880 字符是另一个码(**413** `request.payload_too_large`);
+     *  · 设置编译拒的 **422**(`settings.permissions.{allow,deny,ask}` 里退役名 / 短名 / 协议名铸不出)—— `error` 句首换成 `request settings cannot be applied as written: `,按 `errorCode` `request.unprocessable` 分支(见 `SettingsPermissions.allow`);
+     *  · 技能 `disallowedTools` 里引擎读成空的条目 ⇒ **400** `request.field_invalid`(见 `SkillSpec.disallowedTools`;续跑同判 409 `resume_blocked_by_policy`)。 */
     async submit(req, opts) {
         return this.t.request({
             method: "POST",

package/dist/resources/tasks.js.map

@@ -1 +1 @@
-{"version":3,"file":"tasks.js","sourceRoot":"","sources":["../../src/resources/tasks.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,aAAa,EAA0B,MAAM,WAAW,CAAC;AAElE,MAAM,OAAO,aAAa;IACK;IAA7B,YAA6B,CAAY;QAAZ,MAAC,GAAD,CAAC,CAAW;IAAG,CAAC;IAE7C;;;;;;;;;;;;;;;;;;;;;;;;;;gCA0B4B;IAC5B,KAAK,CAAC,MAAM,CAAC,GAAgB,EAAE,IAA+D;QAC5F,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAmB;YACtC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE,GAAG;YACT,MAAM,EAAE,IAAI;YACZ,cAAc,EAAE,IAAI,EAAE,cAAc;YACpC,MAAM,EAAE,IAAI,EAAE,MAAM;SACrB,CAAC,CAAC;IACL,CAAC;IAED;;;;;8GAK0G;IAC1G,KAAK,CAAC,SAAS,CAAC,GAAgB,EAAE,IAAiG;QACjI,MAAM,CAAC,GAA2C;YAChD,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,kBAAkB;YACxB,IAAI,EAAE,GAAG;YACT,MAAM,EAAE,IAAI;YACZ,cAAc,EAAE,IAAI,EAAE,cAAc;SACrC,CAAC;QACF,IAAI,IAAI,EAAE,OAAO;YAAE,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC5C,IAAI,IAAI,EAAE,MAAM;YAAE,CAAC,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QACzC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACvC,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,MAAM,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,mDAAmD;QACnG,OAAO,GAAG,CAAC;IACb,CAAC;IAED;;;;;;;;;;;;sGAYkG;IAClG,KAAK,CAAC,CAAC,MAAM,CAAC,GAAgB,EAAE,IAAoL;QAClN,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC5C,mGAAmG;QACnG,+FAA+F;QAC/F,IAAI,CAAC;YAAC,IAAI,EAAE,UAAU,EAAE,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,iDAAiD,CAAC,CAAC;QAC5F,IAAI,CAAC;YACH,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;gBACnF,sFAAsF;gBACtF,0EAA0E;gBAC1E,IAAI,KAAK,CAAC,KAAK,KAAK,WAAW,IAAI,CAAC,KAAK,CAAC,IAAI;oBAAE,SAAS;gBACzD,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAe,CAAC;gBAChD,oEAAoE;gBACpE,4EAA4E;gBAC5E,IAAI,KAAK,CAAC,EAAE;oBAAG,EAAwB,CAAC,EAAE,GAAG,KAAK,CAAC,EAAE,CAAC;gBACtD,MAAM,EAAE,CAAC;gBACT,IAAI,EAAE,CAAC,IAAI,KAAK,MAAM,IAAI,EAAE,CAAC,IAAI,KAAK,QAAQ;oBAAE,OAAO;YACzD,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,CAAC,6CAA6C;QACnF,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"tasks.js","sourceRoot":"","sources":["../../src/resources/tasks.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,aAAa,EAA0B,MAAM,WAAW,CAAC;AAElE,MAAM,OAAO,aAAa;IACK;IAA7B,YAA6B,CAAY;QAAZ,MAAC,GAAD,CAAC,CAAW;IAAG,CAAC;IAE7C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iJAgC6I;IAC7I,KAAK,CAAC,MAAM,CAAC,GAAgB,EAAE,IAA+D;QAC5F,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAmB;YACtC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE,GAAG;YACT,MAAM,EAAE,IAAI;YACZ,cAAc,EAAE,IAAI,EAAE,cAAc;YACpC,MAAM,EAAE,IAAI,EAAE,MAAM;SACrB,CAAC,CAAC;IACL,CAAC;IAED;;;;;8GAK0G;IAC1G,KAAK,CAAC,SAAS,CAAC,GAAgB,EAAE,IAAiG;QACjI,MAAM,CAAC,GAA2C;YAChD,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,kBAAkB;YACxB,IAAI,EAAE,GAAG;YACT,MAAM,EAAE,IAAI;YACZ,cAAc,EAAE,IAAI,EAAE,cAAc;SACrC,CAAC;QACF,IAAI,IAAI,EAAE,OAAO;YAAE,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC5C,IAAI,IAAI,EAAE,MAAM;YAAE,CAAC,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QACzC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACvC,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,MAAM,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,mDAAmD;QACnG,OAAO,GAAG,CAAC;IACb,CAAC;IAED;;;;;;;;;;;;sGAYkG;IAClG,KAAK,CAAC,CAAC,MAAM,CAAC,GAAgB,EAAE,IAAoL;QAClN,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC5C,mGAAmG;QACnG,+FAA+F;QAC/F,IAAI,CAAC;YAAC,IAAI,EAAE,UAAU,EAAE,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,iDAAiD,CAAC,CAAC;QAC5F,IAAI,CAAC;YACH,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;gBACnF,sFAAsF;gBACtF,0EAA0E;gBAC1E,IAAI,KAAK,CAAC,KAAK,KAAK,WAAW,IAAI,CAAC,KAAK,CAAC,IAAI;oBAAE,SAAS;gBACzD,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAe,CAAC;gBAChD,oEAAoE;gBACpE,4EAA4E;gBAC5E,IAAI,KAAK,CAAC,EAAE;oBAAG,EAAwB,CAAC,EAAE,GAAG,KAAK,CAAC,EAAE,CAAC;gBACtD,MAAM,EAAE,CAAC;gBACT,IAAI,EAAE,CAAC,IAAI,KAAK,MAAM,IAAI,EAAE,CAAC,IAAI,KAAK,QAAQ;oBAAE,OAAO;YACzD,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,CAAC,6CAA6C;QACnF,CAAC;IACH,CAAC;CACF"}

package/dist/resources/tool-approvals.d.ts

@@ -71,7 +71,7 @@ export type ToolApprovalDecision = "allow" | "allow_session" | "deny";
  *  (client-core 自持同名闭集 copy)做机器对账用——照 settings-schema(原 registry-core)值拷贝+同源锚先例。下游测试断言
  *  自己的 copy 键集 ⊇/== 本清单,SDK 每次 additive 增键(如 1.307 的 `toolCallId`)对方当天红,
  *  不再靠人肉追平。**新增帧字段必须同步进本清单**(有测试钉)。 */
-export declare const TOOL_APPROVAL_FRAME_KEYS: readonly ["type", "approvalId", "toolCallId", "toolName", "sourceTaskId", "fromSubagent", "sourceAgentName", "message", "args", "argsOmitted", "governanceForced", "rememberRefused", "requiresRealApproval", "origin", "inputHasBidi", "expiresAtMs", "expiresInMs", "serverNowMs", "ruleSuggestions", "ruleOffers", "ruleOffersAbsence", "mandated", "mandate", "denialLimitFallback", "persistedRuleShadowed", "probeCause", "probeReason", "ruleEvidence", "delegation", "parked", "outcome", "classifierUnavailable", "ruleStoreUnreadable", "readRootCandidate", "askClass", "classes"];
+export declare const TOOL_APPROVAL_FRAME_KEYS: readonly ["type", "approvalId", "toolCallId", "toolName", "sourceTaskId", "fromSubagent", "sourceAgentName", "message", "args", "argsOmitted", "governanceForced", "rememberRefused", "requiresRealApproval", "origin", "inputHasBidi", "expiresAtMs", "expiresInMs", "serverNowMs", "ruleSuggestions", "ruleOffers", "ruleOffersAbsence", "mandated", "mandate", "denialLimitFallback", "allowRuleShadowed", "persistedRuleShadowed", "probeCause", "probeReason", "ruleEvidence", "delegation", "parked", "outcome", "classifierUnavailable", "ruleStoreUnreadable", "readRootCandidate", "askClass", "classes"];
 /** #154 车二(core 5.18.0 design/179):**引擎铸的**一条规则候选 —— 一格「不再询问」按下去会持久化的东西。
  *
  *  🔴 文本由 ENGINE 铸,不由壳拼:`rule` 是 server 从被裁决命令的原字节交给引擎算出来的规范文本,回决时
@@ -152,7 +152,7 @@ export interface RuleOfferUncoveredDetail {
  *    🔴 这一臂**不得**把人指向"去写条规则" —— 写了也不会消音,那是把用户送进一个死循环;
  *  · `shadowed` —— 有规则命中却清不掉它,**两臂**(core `permission-rule-lanes.js` 的
  *    `createRuleOffersOf` 闭门判据,`closedDoor` 分支逐字):
- *    · 持久规则遮蔽(与 {@link ToolApprovalFrame.persistedRuleShadowed} 同一件事的机读位——已有一条允许规则却清不掉这只 ask);
+ *    · allow 规则遮蔽(与 {@link ToolApprovalFrame.allowRuleShadowed} 同一件事的机读位——allow 层里某个成员命中了却清不掉这只 ask;server ≤7.116.x 上那一键是只覆盖持久规则的旧串 `persistedRuleShadowed`);
  *    · 本人 ask 规则命中(同帧 `origin === "ask_rule"`,core `matchedAskRule` 已铸——这只 ask 正是一条
  *      标准「每次都问我」规则命中的,写 allow 规则也不会消音,因为命中的规则本身就是 ask);
  *  · `lane_cannot_speak` —— 车道这一次说不出话(引擎没能为这条命令铸出任何可覆盖形)。
@@ -167,6 +167,32 @@ export type RuleOffersAbsence = (typeof RULE_OFFERS_ABSENCE_REASONS)[number];
 /** {@link DenialLimitFallback.limit} 的闭二词表 —— 触的是哪一道界(连续拒 / 累计拒)。 */
 export declare const DENIAL_LIMIT_KINDS: readonly ["consecutive", "total"];
 export type DenialLimitKind = (typeof DENIAL_LIMIT_KINDS)[number];
+/**
+ * {@link AllowRuleShadow.member} 的闭五词表(server ≥7.117.0 / core 7.42.0 `ALLOW_RULE_MEMBERS`,逐字且**按引擎读它们的次序**)—— 「这次调用没问」的 allow 层有五个成员:
+ *  · `hook` —— PreToolUse hook 回的显式 `allow`(部署的 hook,或单用户形下 server 收下的请求 `settings.hooks`;**本键分不出是哪一只**);
+ *  · `deployment` —— 运维 env `APPROVAL_GRANT`;
+ *  · `persisted` —— 人存下来的 allow 规则(规则店);
+ *  · `skill` —— 被激活技能的 `allowedTools`;
+ *  · `request` —— 请求体 `settings.permissions.allow`。
+ * 词表属主在 core;server 对词表外的成员**整只不铸键**(不透传未知词),所以 ≥7.117.0 的 server 上读到的恒是这五个之一 ——
+ * 仍按**开集**分支(`default` 臂),因为 core 加成员时 server 会随之放行,而本包的判据(`isApprovalRequestFrameV1`)只要求 `member` 是串。
+ * 与 {@link RULE_OFFERS_ABSENCE_REASONS} 同一条仓内约定(开 / 闭按**产方是否真判成员**定 —— server 的窄读对词表外成员整只不铸键 ⇒ 联合与 spec `enum` 是闭的,K-47 门执法;
+ * 读域留 `default` 臂是对「core 加员、server 随之放行」的前向防线,加员时本联合与 spec enum 同批加词,与 `AskClass` 加词同判 minor)。
+ */
+export declare const ALLOW_RULE_MEMBERS: readonly ["hook", "deployment", "persisted", "skill", "request"];
+export type AllowRuleMember = (typeof ALLOW_RULE_MEMBERS)[number];
+/**
+ * **allow 层的一条披露记录**(server ≥7.117.0 / core 7.42.0 `AllowRuleShadow`):allow 层的某一个成员**命中了这次调用、却没能清掉这只 ask** ——
+ * 帧 / 卡 / 队列行上的 `allowRuleShadowed` 就是这样的记录数组(每个命中的成员至多一条,至多五条)。
+ *  · `member` —— 哪个成员命中(见 {@link ALLOW_RULE_MEMBERS});
+ *  · `entries` —— 那个成员命中的**条目原文**(UNTRUSTED-for-display,已脱敏、每条限 512 字符、最多列 32 条);`hook` 成员恒空表(它的话是关于这次调用的,不是关于某条条目);
+ *  · `omitted` —— 超出上限而没列出的条目数(正整数;缺席 = 没有被省略的)。
+ */
+export interface AllowRuleShadow {
+    member: AllowRuleMember;
+    entries: string[];
+    omitted?: number;
+}
 /**
  * **auto 模式分类器的限额回落卡**(server `approval-card.ts` 的 `DenialLimitFallbackSchema`;S-114 /
  * core 7.4.0 #548)—— 分类器连续(缺省 3)或累计(缺省 20)拒到限额的**那一次**调用不再静默 deny,
@@ -280,7 +306,7 @@ export type PersistedRuleMandate = (typeof PERSISTED_RULE_MANDATES)[number];
  * 反向**不成立**:缺席只读作「**本卡**无此选项」—— 店在场也可能没有这一格(mandated / `requiresRealApproval` /
  * shadowed / hook 产 / inherited-unresolved / ancestor-resolved / anonymous 七族一律不带)。既不能读成
  * 「本部署没有规则车道」(那句话看 `capabilities.permissionRules`),也不能读成「你的规则坏了」(那句话看
- * {@link ToolApprovalFrame.persistedRuleShadowed})。
+ * {@link ToolApprovalFrame.allowRuleShadowed})。
  *
  * 🔴 **兑付两臂,选择键不同**(见 {@link PersistRuleSelection}):`single` 臂把 `rule` 文本**原样**抄回
  * (server 按**文本**定位,抄错 = `rule_not_offered`);`batch` 臂没有单条文本可抄(它是对全体成员的**一个**
@@ -656,6 +682,12 @@ export interface ToolApprovalFrame {
      * persisted allow rules, and that rule **could not silence it**. The value is the shadowed rule's VERBATIM text
      * (secret-redacted + length-bounded; UNTRUSTED-for-display, same treatment as {@link message}).
      *
+     * @deprecated **Retired by server 7.117.0 (core 7.42.0) — replaced by {@link allowRuleShadowed}, no alias.** A server ≥7.117.0 never mints this key (its strict
+     * card schema even refuses a stored card that carries it); only a server ≤7.116.x still does, and this SDK keeps the declaration for those servers (the supported
+     * floor is far below 7.117.0). New code reads {@link allowRuleShadowed} (structured, all five allow-layer members, not just the persisted-rule store); read this
+     * key only as the fallback for an older server. Slated for deletion in the next major — it stays in the key tables as a registered retired key meanwhile.
+     * The semantics below are unchanged for those older servers:
+     *
      * WHY IT EXISTS — it documents a BEHAVIOUR NARROWING (core 5.25.0: "Allow rules silence the CLASSIFIER's
      * questions, never a MANDATED one"). On a `MANUAL_MODE_SHELL_GATE=always` deployment, for tools carrying an
      * egress/irreversible mark, and under the governance gates, asks a user's rule used to silence now REAPPEAR.
@@ -672,11 +704,32 @@ export interface ToolApprovalFrame {
      * carry NO governance badge), so folding them would make those two either lie about provenance or lose the
      * rule explanation. Both can be present, and each can be present alone.
      *
-     * The durable dual is `gate.riskDescriptor.shadowedRule` on the parked row (same value semantics), reaching
-     * {@link import("./approvals.js").ApprovalsResource} through the `riskDescriptor` passthrough — a person whose
-     * live stream dropped sees the same explanation on the durable face.
+     * The durable dual on those older servers is `gate.riskDescriptor.shadowedRule` on the parked row (same value semantics). A server ≥7.117.0 rewrote the SQL
+     * backend's parked rows once at boot to `allowRuleShadowed: [{ member: "persisted", entries: [<old value>] }]`; the file backend's pre-upgrade rows, and run
+     * results already on disk, keep the old key verbatim (text still redacted, but no structured disclosure).
      */
     persistedRuleShadowed?: string;
+    /**
+     * "tool_approval" only, ADDITIVE (**server ≥7.117.0 / core 7.42.0 — BREAKING rename**, replacing the retired string {@link persistedRuleShadowed}; no alias):
+     * the allow-layer members that **matched this call and could NOT clear this ask** — one record `{ member, entries, omitted? }` per matching member (see
+     * {@link AllowRuleShadow}). `member` ∈ `hook` / `deployment` / `persisted` / `skill` / `request` (see {@link ALLOW_RULE_MEMBERS}); `entries` = the entries that member
+     * matched, as their source spells them (UNTRUSTED-for-display like {@link message}, secret-redacted, ≤512 chars each, ≤32 listed; a `hook` record's `entries` is
+     * always the empty list); `omitted` = how many were not listed.
+     *
+     * The explaining sentence itself ("… matches this call but does not clear the ask — <reason>") is **in {@link message}** (the engine writes it where it
+     * builds the card); this key is the structured twin of the same fact. Render a line from it ("your rule matched, but this call must be confirmed each time") —
+     * WITHOUT it the only conclusion a user can draw is "my rule broke".
+     *
+     * 🔴 **ABSENT ≠ "you have no rule"**(缺席 ≠「你没有规则」): present only when a member matched AND could not clear the ask; a match that cleared never becomes an ask at all.
+     * 🔴 **`member:"hook"` does not say whose hook** — a deployment PreToolUse hook and (single-user lane) the request's own `settings.hooks` share one member.
+     * 🔴 **Deliberately SEPARATE from {@link governanceForced}** (that one answers "who imposed the gate", this one "what happened to YOUR rule"; not derivable from each other).
+     * What the allow layer can NOT clear (hence what makes a matching record show up): any layer's deny / ask rule, operator `APPROVAL_REQUIRE` / `APPROVAL_NEVER_AUTO` /
+     * `MANUAL_MODE_SHELL_GATE=always`, write protection, sensitive-path writes, governance, a hook's ask, plan-mode asks.
+     * Same material on the live frame, the stored `card_json`, the replayed frame and the `approval_request` card ({@link ApprovalCard.allowRuleShadowed});
+     * the durable dual is `gate.riskDescriptor.allowRuleShadowed` on the parked row (read via {@link import("../types.js").PendingCheckpoint.riskDescriptor}).
+     * Rolling-upgrade caveat: a card written by a ≤7.116.x replica (`card_json` carrying `persistedRuleShadowed`) cannot be read by a ≥7.117.0 replica — the replay skips it.
+     */
+    allowRuleShadowed?: AllowRuleShadow[];
     /** "tool_approval" only (server ≥7.17.0 / core 5.33.0 #239, ADDITIVE): the STRUCTURED cause of a
      *  reversibility-probe tightening — `{code, roots:{shown,total}, further?:{shown,total}}`. `code` is
      *  machine-readable (open set, branch with a default arm); `shown` may be TRUNCATED by the server (≤8
@@ -885,11 +938,15 @@ export interface ApprovalCard {
      *  随腿不同**的硬条款,逐字见 {@link RuleOffer} 与 {@link ToolApprovalFrame.ruleOffers} ——
      *  live 帧 / `card_json` / 重放帧三面**同一份素材**(server 侧同一只 `copyRuleOffer` 投影)。 */
     ruleOffers?: RuleOffer[];
-    /** ADDITIVE(server ≥7.13.0 / core 5.25.0 #144):被越级的那条持久规则**原文**(已脱敏 + 限长,
-     *  UNTRUSTED-for-display)。语义、**「缺席 ≠ 你没有规则」** 的硬条款、以及与 {@link governanceForced}
-     *  刻意分列的理由,逐字见 {@link ToolApprovalFrame.persistedRuleShadowed} —— live 帧 / `card_json` /
-     *  重放帧三面**同一份素材**。 */
+    /** @deprecated **server 7.117.0 退役(无别名),继任 {@link allowRuleShadowed}**:≥7.117.0 的 server 一个字都不铸它(严格卡 schema 连带有这个键的存量卡也拒读);
+     *  只有 ≤7.116.x 的旧 server 还发 —— 本包保留声明只为读它们(支持地板远低于 7.117.0),下个 major 删。
+     *  旧语义不变:ADDITIVE(server ≥7.13.0 / core 5.25.0 #144),被越级的那条持久规则**原文**(已脱敏 + 限长,UNTRUSTED-for-display);**「缺席 ≠ 你没有规则」** 的硬条款与
+     *  同 {@link governanceForced} 刻意分列的理由逐字见 {@link ToolApprovalFrame.persistedRuleShadowed} —— live 帧 / `card_json` / 重放帧三面**同一份素材**。 */
     persistedRuleShadowed?: string;
+    /** ADDITIVE(**server ≥7.117.0 / core 7.42.0,BREAKING 换名**,取代上面那条退役键):allow 层里命中了这次调用、却清不掉这只 ask 的成员,`{ member, entries, omitted? }[]`。
+     *  语义、五个 `member`、`hook` 恒空表、卡上那句话**在 {@link message} 里**、**「缺席 ≠ 你没有规则」** 与同 {@link governanceForced} 的分列,逐字见 {@link ToolApprovalFrame.allowRuleShadowed} ——
+     *  live 帧 / `card_json` / 重放帧 / `approval_request` 呈卡帧四面**同一份素材**(server 同一只窄读)。`card_json` 是严格信封:7.116.x 副本写下的、带旧键的卡新副本读不动(重放跳过)。 */
+    allowRuleShadowed?: AllowRuleShadow[];
     /** 在场 ⇔ 本 ask 来自**委派子代**(显式判别位,worker 不可伪造)。恒 `true` 或缺席。 */
     fromSubagent?: true;
     /** 子代的 core session id —— 行 join 值 + 对早于 `fromSubagent` 的 server 的回落判别位。 */
@@ -947,7 +1004,7 @@ export interface ApprovalCard {
  *  **新增帧字段必须同步进本清单**(有测试钉)。 */
 export declare const APPROVAL_REQUEST_FRAME_KEYS: readonly ["type", "schemaVersion", "askId", "taskId", "kind", "card", "expiresInMs", "expiresAtMs", "serverNowMs", "approvalId"];
 /** {@link ApprovalCard} 的字段名清单(同上,卡是嵌套结构,单独一份)。 */
-export declare const APPROVAL_CARD_KEYS: readonly ["toolName", "message", "args", "argsOmitted", "toolCallId", "risk", "governanceForced", "rememberRefused", "ruleSuggestions", "ruleOffers", "persistedRuleShadowed", "fromSubagent", "sourceTaskId", "sourceAgentName", "delegation", "inputHasBidi", "probeCause", "ruleEvidence", "ruleOffersAbsence", "denialLimitFallback", "classifierUnavailable", "askClass", "classes"];
+export declare const APPROVAL_CARD_KEYS: readonly ["toolName", "message", "args", "argsOmitted", "toolCallId", "risk", "governanceForced", "rememberRefused", "ruleSuggestions", "ruleOffers", "allowRuleShadowed", "persistedRuleShadowed", "fromSubagent", "sourceTaskId", "sourceAgentName", "delegation", "inputHasBidi", "probeCause", "ruleEvidence", "ruleOffersAbsence", "denialLimitFallback", "classifierUnavailable", "askClass", "classes"];
 /** 流内审批呈卡帧(SSE,`type` 即事件名;design/172 §3.1 + 车3 §4.1)。**两腿两形**:live 腿上它与
  *  `tool_approval`/`question`/`elicitation` 同一条 out-of-band 通道、在 token 流上交织,**不是**
  *  `AgentEvent` 臂(按 SSE `event:` 名分派);durable 腿上 server 会 append 它,于是同一帧在

package/dist/resources/tool-approvals.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tool-approvals.d.ts","sourceRoot":"","sources":["../../src/resources/tool-approvals.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kGAqDkG;AAClG,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAE5C;;;;yBAIyB;AACzB,MAAM,MAAM,oBAAoB,GAAG,OAAO,GAAG,eAAe,GAAG,MAAM,CAAC;AAEtE;;;;;;kEAMkE;AAClE;;;uCAGuC;AACvC,eAAO,MAAM,wBAAwB,+jBA6C3B,CAAC;AAEX;;;;;;;;gDAQgD;AAChD,MAAM,WAAW,cAAc;IAC7B,gEAAgE;IAChE,IAAI,EAAE,MAAM,CAAC;IACb,sDAAsD;IACtD,KAAK,EAAE,OAAO,GAAG,QAAQ,CAAC;IAC1B,kCAAkC;IAClC,OAAO,EAAE,MAAM,CAAC;CACjB;AAiBD;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,kBAAkB,qDAAsD,CAAC;AACtF,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEjE;;;;;;;;;;GAUG;AACH,eAAO,MAAM,6BAA6B,uCAAwC,CAAC;AACnF,MAAM,MAAM,oBAAoB;AAC9B,+BAA+B;AAC7B;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,cAAc,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE;AAC5F;6EAC6E;GAC3E;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAUhF;0EAC0E;AAC1E,eAAO,MAAM,4BAA4B,0DAA2D,CAAC;AACrG,MAAM,MAAM,wBAAwB,GAAG,CAAC,OAAO,4BAA4B,CAAC,CAAC,MAAM,CAAC,CAAC;AAErF;iDACiD;AACjD,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,wBAAwB,CAAC;CAClC;AAOD;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,2BAA2B,wDAAyD,CAAC;AAClG,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,2BAA2B,CAAC,CAAC,MAAM,CAAC,CAAC;AAE7E,qEAAqE;AACrE,eAAO,MAAM,kBAAkB,mCAAoC,CAAC;AACpE,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;AAElE;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,mBAAmB;IAClC,qBAAqB;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,qBAAqB;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,yBAAyB;IACzB,KAAK,EAAE,eAAe,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IACvC,oDAAoD;IACpD,eAAe,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,qBAAqB;IACpC,0DAA0D;IAC1D,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,MAAM,MAAM,SAAS,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAErE;;;;;GAKG;AACH,eAAO,MAAM,WAAW,0MAYd,CAAC;AAEX;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,uBAAuB,oIAO1B,CAAC;AACX,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE5E;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,MAAM,SAAS;AACnB,kBAAkB;AAChB;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,cAAc,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE;AAC1E,iDAAiD;GAC/C;IACE,IAAI,EAAE,OAAO,CAAC;IACd,wDAAwD;IACxD,KAAK,EAAE,oBAAoB,EAAE,CAAC;IAC9B;;8BAE0B;IAC1B,iBAAiB,EAAE,MAAM,CAAC;IAC1B;uEACmE;IACnE,eAAe,CAAC,EAAE,wBAAwB,EAAE,CAAC;CAC9C,CAAC;AAEN;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,mBAAmB;IAClC,8CAA8C;IAC9C,UAAU,EAAE,MAAM,CAAC;IACnB,gDAAgD;IAChD,WAAW,EAAE,MAAM,CAAC;IACpB,4DAA4D;IAC5D,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,MAAM,oBAAoB;AAC9B;;;;;;;;;;;;;;;;;GAiBG;AACD;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAAC,eAAe,CAAC,EAAE,KAAK,CAAA;CAAE;AAC7D;;;;;;;;;;;GAWG;GACD;IAAE,eAAe,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,KAAK,CAAC;IAAC,MAAM,CAAC,EAAE,KAAK,CAAA;CAAE,CAAC;AAE9D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,MAAM,iBAAiB,GACzB,eAAe,GACf,mBAAmB,GACnB,iBAAiB,GACjB,gBAAgB;AAClB;;;8BAG8B;GAC5B,kBAAkB;AACpB;;;;;6BAK6B;GAC3B,eAAe;AACjB;;;;8CAI8C;GAC5C,kBAAkB,GAClB,uBAAuB,GACvB,mBAAmB,GACnB,kBAAkB,GAClB,kBAAkB,GAClB,wBAAwB;AAC1B;;;;;oDAKoD;GAClD,sBAAsB,CAAC;AAE3B,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,eAAe,GAAG,wBAAwB,CAAC;IACjD,oEAAoE;IACpE,UAAU,EAAE,MAAM,CAAC;IACnB,0DAA0D;IAC1D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;;qGAMiG;IACjG,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;;+DAK2D;IAC3D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;oCAIgC;IAChC,YAAY,CAAC,EAAE,IAAI,CAAC;IACpB;;;qCAGiC;IACjC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,8FAA8F;IAC9F,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,yGAAyG;IACzG,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,8GAA8G;IAC9G,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;;;;;;;;;;OAaG;IACH,gBAAgB,CAAC,EAAE,IAAI,CAAC;IACxB;;;;;;;yEAOqE;IACrE,eAAe,CAAC,EAAE,IAAI,CAAC;IACvB;;;;;;kEAM8D;IAC9D,oBAAoB,CAAC,EAAE,IAAI,CAAC;IAC5B;;;;;8EAK0E;IAC1E,MAAM,CAAC,EAAE,SAAS,CAAC;IACnB;;;;;;;;sCAQkC;IAClC,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB;;4BAEwB;IACxB,OAAO,CAAC,EAAE,QAAQ,EAAE,CAAC;IACrB;;;;;;;;;;2DAUuD;IACvD,YAAY,CAAC,EAAE,IAAI,CAAC;IACpB;;;;;;2EAMuE;IACvE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,0EAA0E;IAC1E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iDAAiD;IACjD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4BG;IACH,eAAe,CAAC,EAAE,cAAc,EAAE,CAAC;IACnC;;;;;;;;;;;;;;;OAeG;IACH,UAAU,CAAC,EAAE,SAAS,EAAE,CAAC;IACzB;;;+EAG2E;IAC3E,iBAAiB,CAAC,EAAE,iBAAiB,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IACtD;;;;4GAIwG;IACxG,QAAQ,CAAC,EAAE,IAAI,CAAC;IAChB;;;;;;;;;OASG;IACH,OAAO,CAAC,EAAE,oBAAoB,CAAC;IAC/B;;;;6DAIyD;IACzD,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IAC1C;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B;;;;;;;gDAO4C;IAC5C,UAAU,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE;YAAE,KAAK,EAAE,MAAM,EAAE,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,CAAC;QAAC,OAAO,CAAC,EAAE;YAAE,KAAK,EAAE,MAAM,EAAE,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAC;IACvH;;;;;gDAK4C;IAC5C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;6CA6ByC;IACzC,YAAY,CAAC,EAAE;QACb,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,iBAAiB,CAAC,EAAE,WAAW,GAAG,iBAAiB,GAAG,aAAa,GAAG,UAAU,GAAG,cAAc,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;QAClH,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,aAAa,CAAC,EAAE,WAAW,GAAG,iBAAiB,GAAG,aAAa,GAAG,UAAU,GAAG,cAAc,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;QAC9G,gBAAgB,CAAC,EAAE,KAAK,CAAC;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QAC7D,sBAAsB,CAAC,EAAE,WAAW,GAAG,iBAAiB,GAAG,aAAa,GAAG,UAAU,GAAG,cAAc,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;KACxH,CAAC;IACF;;;6GAGyG;IACzG,UAAU,CAAC,EAAE;QAAE,gBAAgB,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7E;;;;;;oDAMgD;IAChD,MAAM,CAAC,EAAE,IAAI,CAAC;IACd;;;;;sEAKkE;IAClE,OAAO,CAAC,EAAE,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAC;IAC3C;;;;;mFAK+E;IAC/E,qBAAqB,CAAC,EAAE,qBAAqB,CAAC;IAC9C;;;;;;;;2EAQuE;IACvE,mBAAmB,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IACvC;;;;;;;;;;;;;;;;;;;;;;;uBAuBmB;IACnB,iBAAiB,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,IAAI,CAAA;KAAE,CAAC;IACzD,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAeD;sEACsE;AACtE,MAAM,MAAM,mBAAmB,GAAG,SAAS,GAAG,MAAM,CAAC;AAErD;;;;;;;wDAOwD;AACxD,MAAM,WAAW,gBAAgB;IAC/B,8CAA8C;IAC9C,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,4CAA4C;IAC5C,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,+EAA+E;IAC/E,oBAAoB,EAAE,OAAO,CAAC;CAC/B;AAED,0CAA0C;AAC1C,MAAM,WAAW,sBAAsB;IACrC,wCAAwC;IACxC,gBAAgB,EAAE,MAAM,CAAC;IACzB,sBAAsB;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,4EAA4E;IAC5E,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;;;;yBAUyB;AACzB,MAAM,WAAW,YAAY;IAC3B,0BAA0B;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,oCAAoC;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,2EAA2E;IAC3E,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,oEAAoE;IACpE,WAAW,CAAC,EAAE,IAAI,CAAC;IACnB,kGAAkG;IAClG,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,sDAAsD;IACtD,IAAI,EAAE,gBAAgB,CAAC;IACvB;;;iDAG6C;IAC7C,gBAAgB,CAAC,EAAE,IAAI,CAAC;IACxB;uFACmF;IACnF,eAAe,CAAC,EAAE,IAAI,CAAC;IACvB;;;8FAG0F;IAC1F,eAAe,CAAC,EAAE,cAAc,EAAE,CAAC;IACnC;;;iFAG6E;IAC7E,UAAU,CAAC,EAAE,SAAS,EAAE,CAAC;IACzB;;;0BAGsB;IACtB,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,6DAA6D;IAC7D,YAAY,CAAC,EAAE,IAAI,CAAC;IACpB,4EAA4E;IAC5E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kCAAkC;IAClC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,wBAAwB;IACxB,UAAU,CAAC,EAAE,sBAAsB,CAAC;IACpC;;;+FAG2F;IAC3F,YAAY,CAAC,EAAE,IAAI,CAAC;IACpB;0DACsD;IACtD,UAAU,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE;YAAE,KAAK,EAAE,MAAM,EAAE,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,CAAC;QAAC,OAAO,CAAC,EAAE;YAAE,KAAK,EAAE,MAAM,EAAE,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAC;IACvH;6EACyE;IACzE,YAAY,CAAC,EAAE,iBAAiB,CAAC,cAAc,CAAC,CAAC;IACjD;;mFAE+E;IAC/E,iBAAiB,CAAC,EAAE,iBAAiB,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IACtD;gGAC4F;IAC5F,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IAC1C;;;;yEAIqE;IACrE,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,iHAAiH;IACjH,OAAO,CAAC,EAAE,QAAQ,EAAE,CAAC;IACrB;;;;;mFAK+E;IAC/E,qBAAqB,CAAC,EAAE,qBAAqB,CAAC;CAC/C;AAED;;+BAE+B;AAC/B,eAAO,MAAM,2BAA2B,kIAW9B,CAAC;AAEX,mDAAmD;AACnD,eAAO,MAAM,kBAAkB,2XA4BrB,CAAC;AAEX;;;;;;;;;;;;;;;;;;wCAkBwC;AACxC,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,kBAAkB,CAAC;IACzB,wEAAwE;IACxE,aAAa,EAAE,CAAC,CAAC;IACjB;;;8CAG0C;IAC1C,KAAK,EAAE,MAAM,CAAC;IACd,mFAAmF;IACnF,MAAM,EAAE,MAAM,CAAC;IACf;wEACoE;IACpE,IAAI,EAAE,YAAY,CAAC;IACnB,eAAe;IACf,IAAI,EAAE,YAAY,CAAC;IACnB,6DAA6D;IAC7D,WAAW,EAAE,MAAM,CAAC;IACpB,qCAAqC;IACrC,WAAW,EAAE,MAAM,CAAC;IACpB,mCAAmC;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB;8DAC0D;IAC1D,UAAU,EAAE,MAAM,CAAC;IACnB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAED,kDAAkD;AAClD,eAAO,MAAM,0BAA0B,4FAA6F,CAAC;AAErI;;;;;;;;;;oEAUoE;AACpE,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,iBAAiB,CAAC;IACxB,4DAA4D;IAC5D,aAAa,EAAE,CAAC,CAAC;IACjB,eAAe;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,8BAA8B;IAC9B,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB;;;yCAGqC;IACrC,MAAM,EAAE,oBAAoB,GAAG,SAAS,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IACzD,WAAW,EAAE,MAAM,CAAC;IACpB;;;;+CAI2C;IAC3C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAED;;;;;;;;;gEASgE;AAChE,MAAM,WAAW,qBAAqB;IACpC,+BAA+B;IAC/B,IAAI,EAAE,kBAAkB,GAAG,iBAAiB,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IAC7D,4BAA4B;IAC5B,aAAa,EAAE,MAAM,CAAC;IACtB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAwID;;;;;mDAKmD;AACnD,wBAAgB,wBAAwB,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,oBAAoB,CAO9E;AAED;;;;gCAIgC;AAChC,wBAAgB,uBAAuB,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,mBAAmB,CAO5E;AAED;;;;;;;;;;;;;;mFAcmF;AACnF,MAAM,WAAW,cAAc;IAC7B,yDAAyD;IACzD,EAAE,EAAE,MAAM,CAAC;IACX,+DAA+D;IAC/D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,4DAA4D;IAC5D,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;gEAE4D;IAC5D,GAAG,CAAC,EAAE,OAAO,GAAG,UAAU,CAAC;CAC5B;AAED,uEAAuE;AACvE,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,mBAAmB,CAAC;IAC9B;;sEAEkE;IAClE,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB;;;;;uEAKmE;IACnE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;uFACmF;IACnF,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;oEACgE;IAChE,KAAK,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1B;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,SAAS,CAAC,EAAE,QAAQ,CAAC;CACtB;AAED,mCAAmC;AACnC,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,kBAAkB;IAClB,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,0BAA0B;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB;;mEAE+D;IAC/D,KAAK,CAAC,EAAE,cAAc,CAAC;IACvB;;;;mDAI+C;IAC/C,qBAAqB,CAAC,EAAE,IAAI,CAAC;IAC7B;;4EAEwE;IACxE,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;2EAC2E;AAC3E,MAAM,WAAW,sBAAsB;IACrC,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,SAAS,CAAC;IACpB,QAAQ,EAAE,oBAAoB,CAAC;IAC/B;;;;oIAIgI;IAChI,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B;;0CAEsC;IACtC,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC;;;;;;;OAOG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB;;;yCAGqC;IACrC,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAChC;;;;;;;;OAQG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;;;;;OASG;IACH,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B;;;;;;;OAOG;IACH,oBAAoB,CAAC,EAAE,mBAAmB,EAAE,CAAC;IAC7C;;;;;;;;;;;OAWG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,qBAAa,qBAAqB;IACpB,OAAO,CAAC,QAAQ,CAAC,CAAC;gBAAD,CAAC,EAAE,SAAS;IAEzC;;;;;;;;;;uGAUmG;IAC7F,OAAO,CACX,EAAE,EAAE,MAAM,EACV,IAAI,EAAE;QACJ,QAAQ,EAAE,oBAAoB,CAAC;QAC/B;;uCAE+B;QAC/B,YAAY,CAAC,EAAE,OAAO,CAAC;QACvB;;;;;;;;;;;;;;;;;;;;;WAqBG;QACH,WAAW,CAAC,EAAE,oBAAoB,CAAC;QACnC;;;;;;;;;;;WAWG;QACH,IAAI,CAAC,EAAE,MAAM,CAAC;QACd;;;;;;;;;;;;;;;;;;;;WAoBG;QACH,SAAS,CAAC,EAAE,QAAQ,CAAC;QACrB;;;;;;;;;;;;;;;;;;;WAmBG;QACH,aAAa,CAAC,EAAE,MAAM,CAAC;KACxB,EACD,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAC9B,OAAO,CAAC,sBAAsB,CAAC;IASlC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iEAmC6D;IACvD,SAAS,CACb,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,eAAe,EACrB,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAC9B,OAAO,CAAC,cAAc,CAAC;CAQ3B"}
+{"version":3,"file":"tool-approvals.d.ts","sourceRoot":"","sources":["../../src/resources/tool-approvals.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kGAqDkG;AAClG,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAE5C;;;;yBAIyB;AACzB,MAAM,MAAM,oBAAoB,GAAG,OAAO,GAAG,eAAe,GAAG,MAAM,CAAC;AAEtE;;;;;;kEAMkE;AAClE;;;uCAGuC;AACvC,eAAO,MAAM,wBAAwB,olBAgD3B,CAAC;AAEX;;;;;;;;gDAQgD;AAChD,MAAM,WAAW,cAAc;IAC7B,gEAAgE;IAChE,IAAI,EAAE,MAAM,CAAC;IACb,sDAAsD;IACtD,KAAK,EAAE,OAAO,GAAG,QAAQ,CAAC;IAC1B,kCAAkC;IAClC,OAAO,EAAE,MAAM,CAAC;CACjB;AAiBD;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,kBAAkB,qDAAsD,CAAC;AACtF,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEjE;;;;;;;;;;GAUG;AACH,eAAO,MAAM,6BAA6B,uCAAwC,CAAC;AACnF,MAAM,MAAM,oBAAoB;AAC9B,+BAA+B;AAC7B;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,cAAc,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE;AAC5F;6EAC6E;GAC3E;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAUhF;0EAC0E;AAC1E,eAAO,MAAM,4BAA4B,0DAA2D,CAAC;AACrG,MAAM,MAAM,wBAAwB,GAAG,CAAC,OAAO,4BAA4B,CAAC,CAAC,MAAM,CAAC,CAAC;AAErF;iDACiD;AACjD,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,wBAAwB,CAAC;CAClC;AAOD;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,2BAA2B,wDAAyD,CAAC;AAClG,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,2BAA2B,CAAC,CAAC,MAAM,CAAC,CAAC;AAE7E,qEAAqE;AACrE,eAAO,MAAM,kBAAkB,mCAAoC,CAAC;AACpE,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;AAElE;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,kBAAkB,kEAAmE,CAAC;AACnG,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;AAElE;;;;;;GAMG;AACH,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,eAAe,CAAC;IACxB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,mBAAmB;IAClC,qBAAqB;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,qBAAqB;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,yBAAyB;IACzB,KAAK,EAAE,eAAe,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IACvC,oDAAoD;IACpD,eAAe,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,qBAAqB;IACpC,0DAA0D;IAC1D,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,MAAM,MAAM,SAAS,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAErE;;;;;GAKG;AACH,eAAO,MAAM,WAAW,0MAYd,CAAC;AAEX;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,uBAAuB,oIAO1B,CAAC;AACX,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE5E;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,MAAM,SAAS;AACnB,kBAAkB;AAChB;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,cAAc,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE;AAC1E,iDAAiD;GAC/C;IACE,IAAI,EAAE,OAAO,CAAC;IACd,wDAAwD;IACxD,KAAK,EAAE,oBAAoB,EAAE,CAAC;IAC9B;;8BAE0B;IAC1B,iBAAiB,EAAE,MAAM,CAAC;IAC1B;uEACmE;IACnE,eAAe,CAAC,EAAE,wBAAwB,EAAE,CAAC;CAC9C,CAAC;AAEN;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,mBAAmB;IAClC,8CAA8C;IAC9C,UAAU,EAAE,MAAM,CAAC;IACnB,gDAAgD;IAChD,WAAW,EAAE,MAAM,CAAC;IACpB,4DAA4D;IAC5D,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,MAAM,oBAAoB;AAC9B;;;;;;;;;;;;;;;;;GAiBG;AACD;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAAC,eAAe,CAAC,EAAE,KAAK,CAAA;CAAE;AAC7D;;;;;;;;;;;GAWG;GACD;IAAE,eAAe,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,KAAK,CAAC;IAAC,MAAM,CAAC,EAAE,KAAK,CAAA;CAAE,CAAC;AAE9D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,MAAM,iBAAiB,GACzB,eAAe,GACf,mBAAmB,GACnB,iBAAiB,GACjB,gBAAgB;AAClB;;;8BAG8B;GAC5B,kBAAkB;AACpB;;;;;6BAK6B;GAC3B,eAAe;AACjB;;;;8CAI8C;GAC5C,kBAAkB,GAClB,uBAAuB,GACvB,mBAAmB,GACnB,kBAAkB,GAClB,kBAAkB,GAClB,wBAAwB;AAC1B;;;;;oDAKoD;GAClD,sBAAsB,CAAC;AAE3B,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,eAAe,GAAG,wBAAwB,CAAC;IACjD,oEAAoE;IACpE,UAAU,EAAE,MAAM,CAAC;IACnB,0DAA0D;IAC1D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;;qGAMiG;IACjG,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;;+DAK2D;IAC3D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;oCAIgC;IAChC,YAAY,CAAC,EAAE,IAAI,CAAC;IACpB;;;qCAGiC;IACjC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,8FAA8F;IAC9F,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,yGAAyG;IACzG,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,8GAA8G;IAC9G,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;;;;;;;;;;OAaG;IACH,gBAAgB,CAAC,EAAE,IAAI,CAAC;IACxB;;;;;;;yEAOqE;IACrE,eAAe,CAAC,EAAE,IAAI,CAAC;IACvB;;;;;;kEAM8D;IAC9D,oBAAoB,CAAC,EAAE,IAAI,CAAC;IAC5B;;;;;8EAK0E;IAC1E,MAAM,CAAC,EAAE,SAAS,CAAC;IACnB;;;;;;;;sCAQkC;IAClC,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB;;4BAEwB;IACxB,OAAO,CAAC,EAAE,QAAQ,EAAE,CAAC;IACrB;;;;;;;;;;2DAUuD;IACvD,YAAY,CAAC,EAAE,IAAI,CAAC;IACpB;;;;;;2EAMuE;IACvE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,0EAA0E;IAC1E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iDAAiD;IACjD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4BG;IACH,eAAe,CAAC,EAAE,cAAc,EAAE,CAAC;IACnC;;;;;;;;;;;;;;;OAeG;IACH,UAAU,CAAC,EAAE,SAAS,EAAE,CAAC;IACzB;;;+EAG2E;IAC3E,iBAAiB,CAAC,EAAE,iBAAiB,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IACtD;;;;4GAIwG;IACxG,QAAQ,CAAC,EAAE,IAAI,CAAC;IAChB;;;;;;;;;OASG;IACH,OAAO,CAAC,EAAE,oBAAoB,CAAC;IAC/B;;;;6DAIyD;IACzD,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IAC1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA8BG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B;;;;;;;;;;;;;;;;;;;OAmBG;IACH,iBAAiB,CAAC,EAAE,eAAe,EAAE,CAAC;IACtC;;;;;;;gDAO4C;IAC5C,UAAU,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE;YAAE,KAAK,EAAE,MAAM,EAAE,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,CAAC;QAAC,OAAO,CAAC,EAAE;YAAE,KAAK,EAAE,MAAM,EAAE,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAC;IACvH;;;;;gDAK4C;IAC5C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;6CA6ByC;IACzC,YAAY,CAAC,EAAE;QACb,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,iBAAiB,CAAC,EAAE,WAAW,GAAG,iBAAiB,GAAG,aAAa,GAAG,UAAU,GAAG,cAAc,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;QAClH,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,aAAa,CAAC,EAAE,WAAW,GAAG,iBAAiB,GAAG,aAAa,GAAG,UAAU,GAAG,cAAc,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;QAC9G,gBAAgB,CAAC,EAAE,KAAK,CAAC;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QAC7D,sBAAsB,CAAC,EAAE,WAAW,GAAG,iBAAiB,GAAG,aAAa,GAAG,UAAU,GAAG,cAAc,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;KACxH,CAAC;IACF;;;6GAGyG;IACzG,UAAU,CAAC,EAAE;QAAE,gBAAgB,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7E;;;;;;oDAMgD;IAChD,MAAM,CAAC,EAAE,IAAI,CAAC;IACd;;;;;sEAKkE;IAClE,OAAO,CAAC,EAAE,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAC;IAC3C;;;;;mFAK+E;IAC/E,qBAAqB,CAAC,EAAE,qBAAqB,CAAC;IAC9C;;;;;;;;2EAQuE;IACvE,mBAAmB,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IACvC;;;;;;;;;;;;;;;;;;;;;;;uBAuBmB;IACnB,iBAAiB,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,IAAI,CAAA;KAAE,CAAC;IACzD,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAeD;sEACsE;AACtE,MAAM,MAAM,mBAAmB,GAAG,SAAS,GAAG,MAAM,CAAC;AAErD;;;;;;;wDAOwD;AACxD,MAAM,WAAW,gBAAgB;IAC/B,8CAA8C;IAC9C,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,4CAA4C;IAC5C,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,+EAA+E;IAC/E,oBAAoB,EAAE,OAAO,CAAC;CAC/B;AAED,0CAA0C;AAC1C,MAAM,WAAW,sBAAsB;IACrC,wCAAwC;IACxC,gBAAgB,EAAE,MAAM,CAAC;IACzB,sBAAsB;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,4EAA4E;IAC5E,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;;;;yBAUyB;AACzB,MAAM,WAAW,YAAY;IAC3B,0BAA0B;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,oCAAoC;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,2EAA2E;IAC3E,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,oEAAoE;IACpE,WAAW,CAAC,EAAE,IAAI,CAAC;IACnB,kGAAkG;IAClG,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,sDAAsD;IACtD,IAAI,EAAE,gBAAgB,CAAC;IACvB;;;iDAG6C;IAC7C,gBAAgB,CAAC,EAAE,IAAI,CAAC;IACxB;uFACmF;IACnF,eAAe,CAAC,EAAE,IAAI,CAAC;IACvB;;;8FAG0F;IAC1F,eAAe,CAAC,EAAE,cAAc,EAAE,CAAC;IACnC;;;iFAG6E;IAC7E,UAAU,CAAC,EAAE,SAAS,EAAE,CAAC;IACzB;;;0IAGsI;IACtI,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B;;0IAEsI;IACtI,iBAAiB,CAAC,EAAE,eAAe,EAAE,CAAC;IACtC,6DAA6D;IAC7D,YAAY,CAAC,EAAE,IAAI,CAAC;IACpB,4EAA4E;IAC5E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kCAAkC;IAClC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,wBAAwB;IACxB,UAAU,CAAC,EAAE,sBAAsB,CAAC;IACpC;;;+FAG2F;IAC3F,YAAY,CAAC,EAAE,IAAI,CAAC;IACpB;0DACsD;IACtD,UAAU,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE;YAAE,KAAK,EAAE,MAAM,EAAE,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,CAAC;QAAC,OAAO,CAAC,EAAE;YAAE,KAAK,EAAE,MAAM,EAAE,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAC;IACvH;6EACyE;IACzE,YAAY,CAAC,EAAE,iBAAiB,CAAC,cAAc,CAAC,CAAC;IACjD;;mFAE+E;IAC/E,iBAAiB,CAAC,EAAE,iBAAiB,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IACtD;gGAC4F;IAC5F,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IAC1C;;;;yEAIqE;IACrE,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,iHAAiH;IACjH,OAAO,CAAC,EAAE,QAAQ,EAAE,CAAC;IACrB;;;;;mFAK+E;IAC/E,qBAAqB,CAAC,EAAE,qBAAqB,CAAC;CAC/C;AAED;;+BAE+B;AAC/B,eAAO,MAAM,2BAA2B,kIAW9B,CAAC;AAEX,mDAAmD;AACnD,eAAO,MAAM,kBAAkB,gZA8BrB,CAAC;AAEX;;;;;;;;;;;;;;;;;;wCAkBwC;AACxC,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,kBAAkB,CAAC;IACzB,wEAAwE;IACxE,aAAa,EAAE,CAAC,CAAC;IACjB;;;8CAG0C;IAC1C,KAAK,EAAE,MAAM,CAAC;IACd,mFAAmF;IACnF,MAAM,EAAE,MAAM,CAAC;IACf;wEACoE;IACpE,IAAI,EAAE,YAAY,CAAC;IACnB,eAAe;IACf,IAAI,EAAE,YAAY,CAAC;IACnB,6DAA6D;IAC7D,WAAW,EAAE,MAAM,CAAC;IACpB,qCAAqC;IACrC,WAAW,EAAE,MAAM,CAAC;IACpB,mCAAmC;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB;8DAC0D;IAC1D,UAAU,EAAE,MAAM,CAAC;IACnB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAED,kDAAkD;AAClD,eAAO,MAAM,0BAA0B,4FAA6F,CAAC;AAErI;;;;;;;;;;oEAUoE;AACpE,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,iBAAiB,CAAC;IACxB,4DAA4D;IAC5D,aAAa,EAAE,CAAC,CAAC;IACjB,eAAe;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,8BAA8B;IAC9B,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB;;;yCAGqC;IACrC,MAAM,EAAE,oBAAoB,GAAG,SAAS,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IACzD,WAAW,EAAE,MAAM,CAAC;IACpB;;;;+CAI2C;IAC3C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAED;;;;;;;;;gEASgE;AAChE,MAAM,WAAW,qBAAqB;IACpC,+BAA+B;IAC/B,IAAI,EAAE,kBAAkB,GAAG,iBAAiB,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IAC7D,4BAA4B;IAC5B,aAAa,EAAE,MAAM,CAAC;IACtB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAqJD;;;;;mDAKmD;AACnD,wBAAgB,wBAAwB,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,oBAAoB,CAO9E;AAED;;;;gCAIgC;AAChC,wBAAgB,uBAAuB,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,mBAAmB,CAO5E;AAED;;;;;;;;;;;;;;mFAcmF;AACnF,MAAM,WAAW,cAAc;IAC7B,yDAAyD;IACzD,EAAE,EAAE,MAAM,CAAC;IACX,+DAA+D;IAC/D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,4DAA4D;IAC5D,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;gEAE4D;IAC5D,GAAG,CAAC,EAAE,OAAO,GAAG,UAAU,CAAC;CAC5B;AAED,uEAAuE;AACvE,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,mBAAmB,CAAC;IAC9B;;sEAEkE;IAClE,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB;;;;;uEAKmE;IACnE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;uFACmF;IACnF,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;oEACgE;IAChE,KAAK,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1B;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,SAAS,CAAC,EAAE,QAAQ,CAAC;CACtB;AAED,mCAAmC;AACnC,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,kBAAkB;IAClB,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,0BAA0B;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB;;mEAE+D;IAC/D,KAAK,CAAC,EAAE,cAAc,CAAC;IACvB;;;;mDAI+C;IAC/C,qBAAqB,CAAC,EAAE,IAAI,CAAC;IAC7B;;4EAEwE;IACxE,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;2EAC2E;AAC3E,MAAM,WAAW,sBAAsB;IACrC,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,SAAS,CAAC;IACpB,QAAQ,EAAE,oBAAoB,CAAC;IAC/B;;;;oIAIgI;IAChI,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B;;0CAEsC;IACtC,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC;;;;;;;OAOG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB;;;yCAGqC;IACrC,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAChC;;;;;;;;OAQG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;;;;;OASG;IACH,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B;;;;;;;OAOG;IACH,oBAAoB,CAAC,EAAE,mBAAmB,EAAE,CAAC;IAC7C;;;;;;;;;;;OAWG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,qBAAa,qBAAqB;IACpB,OAAO,CAAC,QAAQ,CAAC,CAAC;gBAAD,CAAC,EAAE,SAAS;IAEzC;;;;;;;;;;uGAUmG;IAC7F,OAAO,CACX,EAAE,EAAE,MAAM,EACV,IAAI,EAAE;QACJ,QAAQ,EAAE,oBAAoB,CAAC;QAC/B;;uCAE+B;QAC/B,YAAY,CAAC,EAAE,OAAO,CAAC;QACvB;;;;;;;;;;;;;;;;;;;;;WAqBG;QACH,WAAW,CAAC,EAAE,oBAAoB,CAAC;QACnC;;;;;;;;;;;WAWG;QACH,IAAI,CAAC,EAAE,MAAM,CAAC;QACd;;;;;;;;;;;;;;;;;;;;WAoBG;QACH,SAAS,CAAC,EAAE,QAAQ,CAAC;QACrB;;;;;;;;;;;;;;;;;;;WAmBG;QACH,aAAa,CAAC,EAAE,MAAM,CAAC;KACxB,EACD,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAC9B,OAAO,CAAC,sBAAsB,CAAC;IASlC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iEAmC6D;IACvD,SAAS,CACb,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,eAAe,EACrB,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAC9B,OAAO,CAAC,cAAc,CAAC;CAQ3B"}

package/dist/resources/tool-approvals.js

@@ -36,6 +36,9 @@ export const TOOL_APPROVAL_FRAME_KEYS = [
     "mandated", // server 7.93.0(core 7.26.0 #997)强制卡出身位
     "mandate", // server 7.102.0(core 7.32.0 #1092 / S-721)强制位站在哪一个词上(core PERSISTED_RULE_MANDATES 六词)
     "denialLimitFallback",
+    // server ≥7.117.0(core 7.42.0)—— allow 层披露:命中这次调用却清不掉这只 ask 的成员(取代下一行的旧键;帧 / 卡 / 重放帧同投,耐久对偶 `riskDescriptor.allowRuleShadowed`)。
+    "allowRuleShadowed",
+    // 🔴 退役键(server 7.117.0 起一个字都不铸;留着只为读支持地板之内的旧 server —— 删除条件见 `_keyset-divergence.ts`):`ToolApprovalFrame.persistedRuleShadowed`。
     "persistedRuleShadowed",
     "probeCause",
     // 16.1.0:server ≥7.115.0(S-733)活卡帧散文因由,与 `probeCause` 并列;**只在活卡帧**(`APPROVAL_CARD_KEYS` 不含)。
@@ -113,7 +116,7 @@ export const RULE_OFFER_UNCOVERED_REASONS = ["redirection", "no_rule_form", "cap
  *    🔴 这一臂**不得**把人指向"去写条规则" —— 写了也不会消音,那是把用户送进一个死循环;
  *  · `shadowed` —— 有规则命中却清不掉它,**两臂**(core `permission-rule-lanes.js` 的
  *    `createRuleOffersOf` 闭门判据,`closedDoor` 分支逐字):
- *    · 持久规则遮蔽(与 {@link ToolApprovalFrame.persistedRuleShadowed} 同一件事的机读位——已有一条允许规则却清不掉这只 ask);
+ *    · allow 规则遮蔽(与 {@link ToolApprovalFrame.allowRuleShadowed} 同一件事的机读位——allow 层里某个成员命中了却清不掉这只 ask;server ≤7.116.x 上那一键是只覆盖持久规则的旧串 `persistedRuleShadowed`);
  *    · 本人 ask 规则命中(同帧 `origin === "ask_rule"`,core `matchedAskRule` 已铸——这只 ask 正是一条
  *      标准「每次都问我」规则命中的,写 allow 规则也不会消音,因为命中的规则本身就是 ask);
  *  · `lane_cannot_speak` —— 车道这一次说不出话(引擎没能为这条命令铸出任何可覆盖形)。
@@ -126,6 +129,19 @@ export const RULE_OFFER_UNCOVERED_REASONS = ["redirection", "no_rule_form", "cap
 export const RULE_OFFERS_ABSENCE_REASONS = ["mandated", "shadowed", "lane_cannot_speak"];
 /** {@link DenialLimitFallback.limit} 的闭二词表 —— 触的是哪一道界(连续拒 / 累计拒)。 */
 export const DENIAL_LIMIT_KINDS = ["consecutive", "total"];
+/**
+ * {@link AllowRuleShadow.member} 的闭五词表(server ≥7.117.0 / core 7.42.0 `ALLOW_RULE_MEMBERS`,逐字且**按引擎读它们的次序**)—— 「这次调用没问」的 allow 层有五个成员:
+ *  · `hook` —— PreToolUse hook 回的显式 `allow`(部署的 hook,或单用户形下 server 收下的请求 `settings.hooks`;**本键分不出是哪一只**);
+ *  · `deployment` —— 运维 env `APPROVAL_GRANT`;
+ *  · `persisted` —— 人存下来的 allow 规则(规则店);
+ *  · `skill` —— 被激活技能的 `allowedTools`;
+ *  · `request` —— 请求体 `settings.permissions.allow`。
+ * 词表属主在 core;server 对词表外的成员**整只不铸键**(不透传未知词),所以 ≥7.117.0 的 server 上读到的恒是这五个之一 ——
+ * 仍按**开集**分支(`default` 臂),因为 core 加成员时 server 会随之放行,而本包的判据(`isApprovalRequestFrameV1`)只要求 `member` 是串。
+ * 与 {@link RULE_OFFERS_ABSENCE_REASONS} 同一条仓内约定(开 / 闭按**产方是否真判成员**定 —— server 的窄读对词表外成员整只不铸键 ⇒ 联合与 spec `enum` 是闭的,K-47 门执法;
+ * 读域留 `default` 臂是对「core 加员、server 随之放行」的前向防线,加员时本联合与 spec enum 同批加词,与 `AskClass` 加词同判 minor)。
+ */
+export const ALLOW_RULE_MEMBERS = ["hook", "deployment", "persisted", "skill", "request"];
 /**
  * {@link AskOrigin} 已知词的**运行期值**(sdk 11.4.0 起导出)—— core 7.32.1 `ASK_ORIGINS` 十一词**逐词同序**转录
  * (`dist/core/ask-origin.d.ts:73`)。类型 {@link AskOrigin} 由它派生(加开集臂),两者不再各抄一份。
@@ -201,6 +217,8 @@ export const APPROVAL_CARD_KEYS = [
     "rememberRefused",
     "ruleSuggestions",
     "ruleOffers",
+    // server ≥7.117.0:与帧同一位同一份素材;旧键 `persistedRuleShadowed` 同时是退役键(见 `TOOL_APPROVAL_FRAME_KEYS` 同名注)。
+    "allowRuleShadowed",
     "persistedRuleShadowed",
     "fromSubagent",
     "sourceTaskId",
@@ -333,6 +351,18 @@ function isDenialLimitFallbackV1(v) {
     const d = v;
     return isNum(d.consecutive) && isNum(d.total) && isStr(d.limit) && isNum(d.autoDenyAfterMs);
 }
+/** `allowRuleShadowed` 的判据 —— 数组,每条 `{ member: 串, entries: 串数组, omitted?: 正整数 }`。`member` 按**开集串**读(词表属主在 core,见 {@link ALLOW_RULE_MEMBERS};
+ *  词表外的成员不连坐整张卡);`omitted` 是计数,server 只铸正整数,0 / 小数 / 非数 ⇒ 坏值。形不合 ⇒ 整只判假(半解的披露渲出来比缺席更坏)。 */
+function isAllowRuleShadowedV1(v) {
+    if (!Array.isArray(v))
+        return false;
+    return v.every((r) => {
+        if (typeof r !== "object" || r === null)
+            return false;
+        const x = r;
+        return isStr(x.member) && Array.isArray(x.entries) && x.entries.every(isStr) && optIs(x.omitted, (n) => typeof n === "number" && Number.isInteger(n) && n > 0);
+    });
+}
 function isApprovalCardV1(v) {
     if (typeof v !== "object" || v === null)
         return false;
@@ -346,6 +376,8 @@ function isApprovalCardV1(v) {
         optIs(c.ruleOffers, (x) => Array.isArray(x) && x.every(isRuleOfferV1)) &&
         // 在场形也校验(同 `ruleSuggestions` 那条纪律):这一格是**展示解释**,一个非串的值渲出来是
         // `[object Object]`,而人正指望这一行告诉他「你的规则怎么了」。
+        // 新键 `allowRuleShadowed`(server ≥7.117.0)与退役旧键 `persistedRuleShadowed`(只有 ≤7.116.x 的旧 server 还发)各判各的形;两键不互相推。
+        optIs(c.allowRuleShadowed, isAllowRuleShadowedV1) &&
         optIs(c.persistedRuleShadowed, isStr) &&
         optTrue(c.fromSubagent) &&
         optIs(c.sourceTaskId, isStr) &&

package/dist/resources/tool-approvals.js.map

@@ -1 +1 @@
-{"version":3,"file":"tool-approvals.js","sourceRoot":"","sources":["../../src/resources/tool-approvals.ts"],"names":[],"mappings":"AAgEA;;;;;;kEAMkE;AAClE;;;uCAGuC;AACvC,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,MAAM;IACN,YAAY;IACZ,YAAY;IACZ,UAAU;IACV,cAAc;IACd,cAAc;IACd,iBAAiB;IACjB,SAAS;IACT,MAAM;IACN,aAAa;IACb,kBAAkB;IAClB,2FAA2F;IAC3F,iBAAiB;IACjB,8CAA8C;IAC9C,sBAAsB;IACtB,QAAQ;IACR,cAAc;IACd,aAAa;IACb,aAAa;IACb,aAAa;IACb,iBAAiB;IACjB,YAAY;IACZ,mBAAmB;IACnB,UAAU,EAAE,wCAAwC;IACpD,SAAS,EAAE,uFAAuF;IAClG,qBAAqB;IACrB,uBAAuB;IACvB,YAAY;IACZ,6FAA6F;IAC7F,aAAa;IACb,cAAc;IACd,YAAY;IACZ,QAAQ;IACR,SAAS;IACT,qGAAqG;IACrG,uBAAuB;IACvB,uFAAuF;IACvF,yIAAyI;IACzI,qBAAqB;IACrB,gFAAgF;IAChF,mBAAmB;IACnB,yGAAyG;IACzG,UAAU;IACV,SAAS;CACD,CAAC;AAoBX,sGAAsG;AACtG,qFAAqF;AACrF,EAAE;AACF,2EAA2E;AAC3E,4FAA4F;AAC5F,oFAAoF;AACpF,EAAE;AACF,4EAA4E;AAC5E,uEAAuE;AACvE,wDAAwD;AACxD,sGAAsG;AAEtG,mEAAmE;AACnE,gGAAgG;AAChG,yEAAyE;AACzE;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,CAAU,CAAC;AAGtF;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,SAAS,EAAE,eAAe,CAAU,CAAC;AAanF,MAAM,gBAAgB,GAAmB,IAAI,CAAC;AAC9C,KAAK,gBAAgB,CAAC;AAEtB;0EAC0E;AAC1E,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,aAAa,EAAE,cAAc,EAAE,cAAc,CAAU,CAAC;AAUrG,sGAAsG;AACtG,wEAAwE;AACxE,yFAAyF;AACzF,sGAAsG;AAEtG;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,UAAU,EAAE,UAAU,EAAE,mBAAmB,CAAU,CAAC;AAGlG,qEAAqE;AACrE,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,aAAa,EAAE,OAAO,CAAU,CAAC;AA8EpE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,kBAAkB;IAClB,iBAAiB;IACjB,iBAAiB;IACjB,UAAU;IACV,wBAAwB;IACxB,MAAM;IACN,UAAU;IACV,uBAAuB;IACvB,oBAAoB;IACpB,gBAAgB;IAChB,QAAQ;CACA,CAAC;AAEX;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,iBAAiB;IACjB,YAAY;IACZ,eAAe;IACf,kBAAkB;IAClB,kBAAkB;IAClB,6BAA6B;CACrB,CAAC;AAypBX;;+BAE+B;AAC/B,MAAM,CAAC,MAAM,2BAA2B,GAAG;IACzC,MAAM;IACN,eAAe;IACf,OAAO;IACP,QAAQ;IACR,MAAM;IACN,MAAM;IACN,aAAa;IACb,aAAa;IACb,aAAa;IACb,YAAY;CACJ,CAAC;AAEX,mDAAmD;AACnD,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,UAAU;IACV,SAAS;IACT,MAAM;IACN,aAAa;IACb,YAAY;IACZ,MAAM;IACN,kBAAkB;IAClB,oIAAoI;IACpI,iBAAiB;IACjB,iBAAiB;IACjB,YAAY;IACZ,uBAAuB;IACvB,cAAc;IACd,cAAc;IACd,iBAAiB;IACjB,YAAY;IACZ,cAAc;IACd,YAAY;IACZ,cAAc;IACd,wBAAwB;IACxB,mBAAmB;IACnB,qBAAqB;IACrB,mEAAmE;IACnE,uBAAuB;IACvB,iEAAiE;IACjE,UAAU;IACV,SAAS;CACD,CAAC;AAiDX,kDAAkD;AAClD,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,MAAM,EAAE,eAAe,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,aAAa,EAAE,QAAQ,CAAU,CAAC;AAsDrI,2FAA2F;AAC3F,0DAA0D;AAC1D,qFAAqF;AACrF,oEAAoE;AACpE,mDAAmD;AACnD,MAAM,KAAK,GAAG,CAAC,CAAU,EAAW,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;AAC7D,MAAM,KAAK,GAAG,CAAC,CAAU,EAAW,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;AAC7D,MAAM,KAAK,GAAG,CAAC,CAAU,EAAE,EAA2B,EAAW,EAAE,CAAC,CAAC,KAAK,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAC7F,MAAM,OAAO,GAAG,CAAC,CAAU,EAAW,EAAE,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI,CAAC;AAEvE,SAAS,oBAAoB,CAAC,CAAU;IACtC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,CAAC,GAAG,CAA4B,CAAC;IACvC,IAAI,OAAO,CAAC,CAAC,oBAAoB,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC9D,OAAO,KAAK,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,SAAS,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,SAAS,CAAC,CAAC;AAChH,CAAC;AAED,SAAS,0BAA0B,CAAC,CAAU;IAC5C,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,CAAC,GAAG,CAA4B,CAAC;IACvC,OAAO,KAAK,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;AAClF,CAAC;AAED;;4CAE4C;AAC5C,SAAS,kBAAkB,CAAC,CAAU;IACpC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,CAAC,GAAG,CAA4B,CAAC;IACvC,OAAO,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,OAAO,IAAI,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC;AAC5F,CAAC;AAED;;;qEAGqE;AACrE,SAAS,aAAa,CAAC,CAAU;IAC/B,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,CAAC,GAAG,CAA4B,CAAC;IACvC,MAAM,OAAO,GAAG,CAAC,CAAU,EAAW,EAAE,CAAE,kBAAyC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAChG,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACtF,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC,CAAC,iCAAiC;IACvE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAClE,IAAI,OAAO,CAAC,CAAC,iBAAiB,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,iBAAiB,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACnI,MAAM,QAAQ,GAAG,CAAC,CAAU,EAAW,EAAE;QACvC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QACtD,MAAM,CAAC,GAAG,CAA4B,CAAC;QACvC,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAC3G,IAAI,CAAC,CAAC,IAAI,KAAK,eAAe;YAAE,OAAO,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAC/F,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IACF,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3C,MAAM,QAAQ,GAAG,CAAC,CAAU,EAAW,EAAE;QACvC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QACtD,MAAM,CAAC,GAAG,CAA4B,CAAC;QACvC,OAAO,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,IAAK,4BAAmD,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACrG,CAAC,CAAC;IACF,OAAO,KAAK,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;AAChF,CAAC;AAED;;kDAEkD;AAClD,SAAS,sBAAsB,CAAC,CAAU;IACxC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,CAAC,GAAG,CAA4B,CAAC;IACvC,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;AAC1E,CAAC;AACD,SAAS,cAAc,CAAC,CAAU;IAChC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,CAAC,GAAG,CAA4B,CAAC;IACvC,OAAO,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,sBAAsB,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC;AACtG,CAAC;AAED;;;sBAGsB;AACtB,SAAS,gBAAgB,CAAC,CAAU;IAClC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,CAAC,GAAG,CAA4B,CAAC;IACvC,MAAM,KAAK,GAAG,CAAC,CAAU,EAAW,EAAE;QACpC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QACtD,MAAM,CAAC,GAAG,CAA4B,CAAC;QACvC,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAC5C,CAAC,CAAC;IACF,OAAO,CACL,KAAK,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,CAAC;QAC3B,KAAK,CAAC,CAAC,CAAC,iBAAiB,EAAE,KAAK,CAAC;QACjC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC;QACvB,KAAK,CAAC,CAAC,CAAC,aAAa,EAAE,KAAK,CAAC;QAC7B,KAAK,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACpE,KAAK,CAAC,CAAC,CAAC,sBAAsB,EAAE,KAAK,CAAC,CACvC,CAAC;AACJ,CAAC;AAED;6DAC6D;AAC7D,SAAS,uBAAuB,CAAC,CAAU;IACzC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,CAAC,GAAG,CAA4B,CAAC;IACvC,OAAO,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;AAC9F,CAAC;AAED,SAAS,gBAAgB,CAAC,CAAU;IAClC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,CAAC,GAAG,CAA4B,CAAC;IACvC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3F,gEAAgE;IAChE,OAAO,CACL,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC;QACtB,KAAK,CAAC,CAAC,CAAC,UAAU,EAAE,KAAK,CAAC;QAC1B,KAAK,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;QAChF,KAAK,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QACtE,2DAA2D;QAC3D,0CAA0C;QAC1C,KAAK,CAAC,CAAC,CAAC,qBAAqB,EAAE,KAAK,CAAC;QACrC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC;QACvB,KAAK,CAAC,CAAC,CAAC,YAAY,EAAE,KAAK,CAAC;QAC5B,KAAK,CAAC,CAAC,CAAC,eAAe,EAAE,KAAK,CAAC;QAC/B,KAAK,CAAC,CAAC,CAAC,UAAU,EAAE,0BAA0B,CAAC;QAC/C,+DAA+D;QAC/D,+DAA+D;QAC/D,gEAAgE;QAChE,+CAA+C;QAC/C,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC;QACvB,KAAK,CAAC,CAAC,CAAC,UAAU,EAAE,cAAc,CAAC;QACnC,KAAK,CAAC,CAAC,CAAC,YAAY,EAAE,gBAAgB,CAAC;QACvC,qDAAqD;QACrD,KAAK,CAAC,CAAC,CAAC,iBAAiB,EAAE,KAAK,CAAC;QACjC,KAAK,CAAC,CAAC,CAAC,mBAAmB,EAAE,uBAAuB,CAAC,CACtD,CAAC;AACJ,CAAC;AAED;;;;;mDAKmD;AACnD,MAAM,UAAU,wBAAwB,CAAC,CAAU;IACjD,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,CAAC,GAAG,CAA4B,CAAC;IACvC,IAAI,CAAC,CAAC,IAAI,KAAK,kBAAkB,IAAI,CAAC,CAAC,aAAa,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,YAAY;QAAE,OAAO,KAAK,CAAC;IACpG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9E,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1F,OAAO,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAClC,CAAC;AAED;;;;gCAIgC;AAChC,MAAM,UAAU,uBAAuB,CAAC,CAAU;IAChD,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,CAAC,GAAG,CAA4B,CAAC;IACvC,IAAI,CAAC,CAAC,IAAI,KAAK,iBAAiB,IAAI,CAAC,CAAC,aAAa,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC;QAAE,OAAO,KAAK,CAAC;IACjF,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7D,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AA6KD,MAAM,OAAO,qBAAqB;IACH;IAA7B,YAA6B,CAAY;QAAZ,MAAC,GAAD,CAAC,CAAW;IAAG,CAAC;IAE7C;;;;;;;;;;uGAUmG;IACnG,KAAK,CAAC,OAAO,CACX,EAAU,EACV,IAqFC,EACD,IAA+B;QAE/B,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAyB;YAC5C,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,sBAAsB,kBAAkB,CAAC,EAAE,CAAC,UAAU;YAC5D,IAAI;YACJ,MAAM,EAAE,IAAI,EAAE,MAAM;SACrB,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iEAmC6D;IAC7D,KAAK,CAAC,SAAS,CACb,MAAc,EACd,KAAa,EACb,IAAqB,EACrB,IAA+B;QAE/B,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAiB;YACpC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,aAAa,kBAAkB,CAAC,MAAM,CAAC,SAAS,kBAAkB,CAAC,KAAK,CAAC,WAAW;YAC1F,IAAI;YACJ,MAAM,EAAE,IAAI,EAAE,MAAM;SACrB,CAAC,CAAC;IACL,CAAC;CACF"}
+{"version":3,"file":"tool-approvals.js","sourceRoot":"","sources":["../../src/resources/tool-approvals.ts"],"names":[],"mappings":"AAgEA;;;;;;kEAMkE;AAClE;;;uCAGuC;AACvC,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,MAAM;IACN,YAAY;IACZ,YAAY;IACZ,UAAU;IACV,cAAc;IACd,cAAc;IACd,iBAAiB;IACjB,SAAS;IACT,MAAM;IACN,aAAa;IACb,kBAAkB;IAClB,2FAA2F;IAC3F,iBAAiB;IACjB,8CAA8C;IAC9C,sBAAsB;IACtB,QAAQ;IACR,cAAc;IACd,aAAa;IACb,aAAa;IACb,aAAa;IACb,iBAAiB;IACjB,YAAY;IACZ,mBAAmB;IACnB,UAAU,EAAE,wCAAwC;IACpD,SAAS,EAAE,uFAAuF;IAClG,qBAAqB;IACrB,iIAAiI;IACjI,mBAAmB;IACnB,kIAAkI;IAClI,uBAAuB;IACvB,YAAY;IACZ,6FAA6F;IAC7F,aAAa;IACb,cAAc;IACd,YAAY;IACZ,QAAQ;IACR,SAAS;IACT,qGAAqG;IACrG,uBAAuB;IACvB,uFAAuF;IACvF,yIAAyI;IACzI,qBAAqB;IACrB,gFAAgF;IAChF,mBAAmB;IACnB,yGAAyG;IACzG,UAAU;IACV,SAAS;CACD,CAAC;AAoBX,sGAAsG;AACtG,qFAAqF;AACrF,EAAE;AACF,2EAA2E;AAC3E,4FAA4F;AAC5F,oFAAoF;AACpF,EAAE;AACF,4EAA4E;AAC5E,uEAAuE;AACvE,wDAAwD;AACxD,sGAAsG;AAEtG,mEAAmE;AACnE,gGAAgG;AAChG,yEAAyE;AACzE;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,CAAU,CAAC;AAGtF;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,SAAS,EAAE,eAAe,CAAU,CAAC;AAanF,MAAM,gBAAgB,GAAmB,IAAI,CAAC;AAC9C,KAAK,gBAAgB,CAAC;AAEtB;0EAC0E;AAC1E,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,aAAa,EAAE,cAAc,EAAE,cAAc,CAAU,CAAC;AAUrG,sGAAsG;AACtG,wEAAwE;AACxE,yFAAyF;AACzF,sGAAsG;AAEtG;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,UAAU,EAAE,UAAU,EAAE,mBAAmB,CAAU,CAAC;AAGlG,qEAAqE;AACrE,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,aAAa,EAAE,OAAO,CAAU,CAAC;AAGpE;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,CAAU,CAAC;AA2FnG;;;;;GAKG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,kBAAkB;IAClB,iBAAiB;IACjB,iBAAiB;IACjB,UAAU;IACV,wBAAwB;IACxB,MAAM;IACN,UAAU;IACV,uBAAuB;IACvB,oBAAoB;IACpB,gBAAgB;IAChB,QAAQ;CACA,CAAC;AAEX;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,iBAAiB;IACjB,YAAY;IACZ,eAAe;IACf,kBAAkB;IAClB,kBAAkB;IAClB,6BAA6B;CACrB,CAAC;AAwrBX;;+BAE+B;AAC/B,MAAM,CAAC,MAAM,2BAA2B,GAAG;IACzC,MAAM;IACN,eAAe;IACf,OAAO;IACP,QAAQ;IACR,MAAM;IACN,MAAM;IACN,aAAa;IACb,aAAa;IACb,aAAa;IACb,YAAY;CACJ,CAAC;AAEX,mDAAmD;AACnD,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,UAAU;IACV,SAAS;IACT,MAAM;IACN,aAAa;IACb,YAAY;IACZ,MAAM;IACN,kBAAkB;IAClB,oIAAoI;IACpI,iBAAiB;IACjB,iBAAiB;IACjB,YAAY;IACZ,kGAAkG;IAClG,mBAAmB;IACnB,uBAAuB;IACvB,cAAc;IACd,cAAc;IACd,iBAAiB;IACjB,YAAY;IACZ,cAAc;IACd,YAAY;IACZ,cAAc;IACd,wBAAwB;IACxB,mBAAmB;IACnB,qBAAqB;IACrB,mEAAmE;IACnE,uBAAuB;IACvB,iEAAiE;IACjE,UAAU;IACV,SAAS;CACD,CAAC;AAiDX,kDAAkD;AAClD,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,MAAM,EAAE,eAAe,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,aAAa,EAAE,QAAQ,CAAU,CAAC;AAsDrI,2FAA2F;AAC3F,0DAA0D;AAC1D,qFAAqF;AACrF,oEAAoE;AACpE,mDAAmD;AACnD,MAAM,KAAK,GAAG,CAAC,CAAU,EAAW,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;AAC7D,MAAM,KAAK,GAAG,CAAC,CAAU,EAAW,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;AAC7D,MAAM,KAAK,GAAG,CAAC,CAAU,EAAE,EAA2B,EAAW,EAAE,CAAC,CAAC,KAAK,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAC7F,MAAM,OAAO,GAAG,CAAC,CAAU,EAAW,EAAE,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI,CAAC;AAEvE,SAAS,oBAAoB,CAAC,CAAU;IACtC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,CAAC,GAAG,CAA4B,CAAC;IACvC,IAAI,OAAO,CAAC,CAAC,oBAAoB,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC9D,OAAO,KAAK,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,SAAS,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,SAAS,CAAC,CAAC;AAChH,CAAC;AAED,SAAS,0BAA0B,CAAC,CAAU;IAC5C,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,CAAC,GAAG,CAA4B,CAAC;IACvC,OAAO,KAAK,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;AAClF,CAAC;AAED;;4CAE4C;AAC5C,SAAS,kBAAkB,CAAC,CAAU;IACpC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,CAAC,GAAG,CAA4B,CAAC;IACvC,OAAO,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,OAAO,IAAI,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC;AAC5F,CAAC;AAED;;;qEAGqE;AACrE,SAAS,aAAa,CAAC,CAAU;IAC/B,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,CAAC,GAAG,CAA4B,CAAC;IACvC,MAAM,OAAO,GAAG,CAAC,CAAU,EAAW,EAAE,CAAE,kBAAyC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAChG,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACtF,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC,CAAC,iCAAiC;IACvE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAClE,IAAI,OAAO,CAAC,CAAC,iBAAiB,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,iBAAiB,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACnI,MAAM,QAAQ,GAAG,CAAC,CAAU,EAAW,EAAE;QACvC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QACtD,MAAM,CAAC,GAAG,CAA4B,CAAC;QACvC,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAC3G,IAAI,CAAC,CAAC,IAAI,KAAK,eAAe;YAAE,OAAO,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAC/F,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IACF,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3C,MAAM,QAAQ,GAAG,CAAC,CAAU,EAAW,EAAE;QACvC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QACtD,MAAM,CAAC,GAAG,CAA4B,CAAC;QACvC,OAAO,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,IAAK,4BAAmD,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACrG,CAAC,CAAC;IACF,OAAO,KAAK,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;AAChF,CAAC;AAED;;kDAEkD;AAClD,SAAS,sBAAsB,CAAC,CAAU;IACxC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,CAAC,GAAG,CAA4B,CAAC;IACvC,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;AAC1E,CAAC;AACD,SAAS,cAAc,CAAC,CAAU;IAChC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,CAAC,GAAG,CAA4B,CAAC;IACvC,OAAO,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,sBAAsB,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC;AACtG,CAAC;AAED;;;sBAGsB;AACtB,SAAS,gBAAgB,CAAC,CAAU;IAClC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,CAAC,GAAG,CAA4B,CAAC;IACvC,MAAM,KAAK,GAAG,CAAC,CAAU,EAAW,EAAE;QACpC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QACtD,MAAM,CAAC,GAAG,CAA4B,CAAC;QACvC,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAC5C,CAAC,CAAC;IACF,OAAO,CACL,KAAK,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,CAAC;QAC3B,KAAK,CAAC,CAAC,CAAC,iBAAiB,EAAE,KAAK,CAAC;QACjC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC;QACvB,KAAK,CAAC,CAAC,CAAC,aAAa,EAAE,KAAK,CAAC;QAC7B,KAAK,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACpE,KAAK,CAAC,CAAC,CAAC,sBAAsB,EAAE,KAAK,CAAC,CACvC,CAAC;AACJ,CAAC;AAED;6DAC6D;AAC7D,SAAS,uBAAuB,CAAC,CAAU;IACzC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,CAAC,GAAG,CAA4B,CAAC;IACvC,OAAO,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;AAC9F,CAAC;AAED;2FAC2F;AAC3F,SAAS,qBAAqB,CAAC,CAAU;IACvC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACpC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;QACnB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QACtD,MAAM,CAAC,GAAG,CAA4B,CAAC;QACvC,OAAO,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACjK,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,gBAAgB,CAAC,CAAU;IAClC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,CAAC,GAAG,CAA4B,CAAC;IACvC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3F,gEAAgE;IAChE,OAAO,CACL,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC;QACtB,KAAK,CAAC,CAAC,CAAC,UAAU,EAAE,KAAK,CAAC;QAC1B,KAAK,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;QAChF,KAAK,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QACtE,2DAA2D;QAC3D,0CAA0C;QAC1C,8GAA8G;QAC9G,KAAK,CAAC,CAAC,CAAC,iBAAiB,EAAE,qBAAqB,CAAC;QACjD,KAAK,CAAC,CAAC,CAAC,qBAAqB,EAAE,KAAK,CAAC;QACrC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC;QACvB,KAAK,CAAC,CAAC,CAAC,YAAY,EAAE,KAAK,CAAC;QAC5B,KAAK,CAAC,CAAC,CAAC,eAAe,EAAE,KAAK,CAAC;QAC/B,KAAK,CAAC,CAAC,CAAC,UAAU,EAAE,0BAA0B,CAAC;QAC/C,+DAA+D;QAC/D,+DAA+D;QAC/D,gEAAgE;QAChE,+CAA+C;QAC/C,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC;QACvB,KAAK,CAAC,CAAC,CAAC,UAAU,EAAE,cAAc,CAAC;QACnC,KAAK,CAAC,CAAC,CAAC,YAAY,EAAE,gBAAgB,CAAC;QACvC,qDAAqD;QACrD,KAAK,CAAC,CAAC,CAAC,iBAAiB,EAAE,KAAK,CAAC;QACjC,KAAK,CAAC,CAAC,CAAC,mBAAmB,EAAE,uBAAuB,CAAC,CACtD,CAAC;AACJ,CAAC;AAED;;;;;mDAKmD;AACnD,MAAM,UAAU,wBAAwB,CAAC,CAAU;IACjD,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,CAAC,GAAG,CAA4B,CAAC;IACvC,IAAI,CAAC,CAAC,IAAI,KAAK,kBAAkB,IAAI,CAAC,CAAC,aAAa,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,YAAY;QAAE,OAAO,KAAK,CAAC;IACpG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9E,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1F,OAAO,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAClC,CAAC;AAED;;;;gCAIgC;AAChC,MAAM,UAAU,uBAAuB,CAAC,CAAU;IAChD,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,CAAC,GAAG,CAA4B,CAAC;IACvC,IAAI,CAAC,CAAC,IAAI,KAAK,iBAAiB,IAAI,CAAC,CAAC,aAAa,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC;QAAE,OAAO,KAAK,CAAC;IACjF,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7D,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AA6KD,MAAM,OAAO,qBAAqB;IACH;IAA7B,YAA6B,CAAY;QAAZ,MAAC,GAAD,CAAC,CAAW;IAAG,CAAC;IAE7C;;;;;;;;;;uGAUmG;IACnG,KAAK,CAAC,OAAO,CACX,EAAU,EACV,IAqFC,EACD,IAA+B;QAE/B,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAyB;YAC5C,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,sBAAsB,kBAAkB,CAAC,EAAE,CAAC,UAAU;YAC5D,IAAI;YACJ,MAAM,EAAE,IAAI,EAAE,MAAM;SACrB,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iEAmC6D;IAC7D,KAAK,CAAC,SAAS,CACb,MAAc,EACd,KAAa,EACb,IAAqB,EACrB,IAA+B;QAE/B,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAiB;YACpC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,aAAa,kBAAkB,CAAC,MAAM,CAAC,SAAS,kBAAkB,CAAC,KAAK,CAAC,WAAW;YAC1F,IAAI;YACJ,MAAM,EAAE,IAAI,EAAE,MAAM;SACrB,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/settings.d.ts

@@ -90,21 +90,31 @@ export interface SettingsHooks {
 /** CC-parity permission rules — string-PATTERN arrays (e.g. `"Bash(git *)"`, `"Read"`, `"Bash(rm -rf *)"`).
  *  Maps to core `SessionPolicyStore` → {@link SessionPermissionRules} (commandAllow/Deny by argv[0], toolAllow/Deny,
  *  allowDirs). 🔴 tighten-only: a normal (non-operator) write may only narrow; loosening → 403 `loosen_forbidden`.
- *  ⚠️ 上面说的是 SessionPolicyStore(会话规则)那一条腿;**提交体里的 `settings.permissions.allow`**(server ≥7.115.0)是另一回事 —— 它是 allow 规则(表态),读法见 {@link SettingsPermissions.allow}。 */
+ *  ⚠️ 上面说的是 SessionPolicyStore(会话规则)那一条腿;**提交体里的 `settings.permissions.allow`**(server ≥7.115.0 是 allow 规则〔表态〕,≥7.117.0 起整份交引擎 allow 层、免问)是另一回事,读法见 {@link SettingsPermissions.allow}。 */
 export interface SettingsPermissions {
-    /** 🔴 **allow 规则(= 表态),不是名单,不是免问**(server ≥7.115.0 / S-654;先探 `capabilities.settings.permissions.allowGrant === true`,键缺席 = 老 server、按名单读 —— 别投这只桶)。
+    /** 🔴 **读法随 server 代际变,先探能力位 `capabilities.settings.permissions`**(缺席的位 = 更老一代):
+     *
+     *  **≥7.117.0(`allowLayer === true`,core 7.42.0)—— allow 整份原样交给引擎的 allow 层,表里的调用免问**:清「普通问 + 没人表态」两类,**内置工具的写门 / shell 普通问也清**
+     *  (与参照实现(CC)的 `permissions.allow` 同读:`allow: ["Edit"]` 起文件写不再问)。**内容形受理**(`Bash(git:*)`、`Read(//dir/<glob>)` 常设放行);引擎读成空的条目
+     *  (`*`、写路径形 `Edit(<path-glob>)` / 域名形 / 带空白的名字 / `Read(~/…)`)**不拒**,开跑时收 `engine_notice` `permission.allowed_tool_not_granted`(user 受众)—— 写错了看通告,不靠 422。
+     *  清不掉的:任何一层的 deny / ask 规则(`deny` / `ask` 桶、运维 `APPROVAL_DENY` / `APPROVAL_REQUIRE`)、`APPROVAL_NEVER_AUTO`、`MANUAL_MODE_SHELL_GATE=always`、写保护 / 敏感写路径、治理、hook 的问、plan 模式的问;
+     *  命中却清不掉时卡上带 `allowRuleShadowed`({@link import("./resources/tool-approvals.js").ToolApprovalFrame.allowRuleShadowed},`member:"request"`)。要「某只工具必须到人」用 deny / ask 桶或运维逐工具旋钮。
+     *  受理口只判两件:字符串数组(**≤1000 条**,超了 400 `over_cap`;帽是引擎逐条准备的开销界)与**名字**(与 deny / ask 两桶同一只判官、同一句 422):退役名(`Task`)/ 无协议前缀的短名(`figma__x`)/ 协议名服务器段铸不出 / 缺段 / 写通配(`mcp__*`)⇒ **整请求 422**;内容不判。
+     *  🔴 **这条 422 的读法(7.117.0 起)**:`error` 句首是 `request settings cannot be applied as written: `(≤7.116.x 是另一句、带「tighten-only」字样的旧句首;三只桶共用这一个出口,旧句首对写收紧规则的调用方是误导、对 allow 桶是假话,所以换成不带方向的一句)——
+     *  **别按句子分派,读 `errorCode`**:它不带自有码,落状态派生粗码 `request.unprocessable`(sdk 落 `BadRequestError`,`status` 422;不自动重试)。
+     *  请求自带技能的 `allowedTools`({@link import("./types.js").SkillSpec.allowedTools})与本键**同一读法**。
+     *
+     *  **7.115.0–7.116.x(只有 `allowGrant`、没有 `allowLayer`)—— allow 规则(= 表态),不是名单,不是免问**(先探 `capabilities.settings.permissions.allowGrant === true`,键缺席 = 老 server、按名单读 —— 别投这只桶)。
      *  一条 allow 规则命中 = **带理由的放行**,即给出「有人表态」:它回答的是**没人表态**的 MCP 服务器工具 / A2A 技能调用(否则询问类模式下那一问出一张 `askClass:"unstated"` 的卡,无审批面则拒);
      *  **未命中 = 不表态、照常判**(名单外的工具**不再被拒** —— ≤7.114.x 上名单在场 ⇒ 名单外一律拒,那一读法已翻)。
-     *  ⚠️ 与参照实现(CC)的 `permissions.allow` **不同**:CC 里 `allow: ["Edit"]` 会跳过编辑确认;这里写 `Write` / `Bash` 只是表态,`default` 模式下引擎自己的写门 / shell 检查**照问**,**deny / ask 照赢**
+     *  ⚠️ 那两代与参照实现(CC)的 `permissions.allow` **不同**:CC 里 `allow: ["Edit"]` 会跳过编辑确认;这里写 `Write` / `Bash` 只是表态,`default` 模式下引擎自己的写门 / shell 检查**照问**,**deny / ask 照赢**
      *  (要免掉那些问用 `permissionMode`)。要「**只许这些工具**」用真旋钮:会话规则 `PUT /v1/sessions/:id/policy` 的 `toolAllow`、每请求 `excludeTools` / `excludeAllTools`、或部署场景工具面。
      *  规则形与 deny / ask **同一只判据**:工具名规则(精确名,或 `mcp__<server>__*` / `a2a__<peer>__*`;`Bash(*)` 这类「工具名 + 通配内容」收下并编成整工具规则;
-     *  🔴 server ≥7.116.0 另收**两段覆盖形** `mcp__<server>` / `a2a__<peer>`,读作整台服务器,与 `mcp__<server>__*` 同义 —— ≤7.115.x 上它是 422);退役名 / 无前缀短名 /
+     *  server ≥7.116.0 另收**两段覆盖形** `mcp__<server>` / `a2a__<peer>`,读作整台服务器,与 `mcp__<server>__*` 同义 —— ≤7.115.x 上它是 422);退役名 / 无前缀短名 /
      *  缺段名(`mcp__` / `mcp__<server>__`)/ **服务器段不是引擎铸出来的那一段**(例 `mcp__github.com__*`:引擎把服务器名归一成 `github_com`,规则逐字比 ⇒ 永不命中,
-     *  7.116.0 起 422 并给出正确写法 `mcp__github_com__*`,此前被收下)/ 反斜杠 / 超 512 字符,以及**内容形**(`Bash(npm:*)` / `Read(./x)` / `WebFetch(domain:…)`)⇒ **整请求 422**(内容形的常设放行进持久规则店:`/v1/rules/cc-import`,或在卡上答 yes 时留规则;
-     *  🚧 那条 422 的句首仍写着 tighten-only —— server 已登记待收〔S-1085〕,别按句子分派)。
-     *  🔴 **旧说法已作废**:本键旧注把它当「只许这些」的名单 —— 键名不变、读法翻了;把它当白名单用的调用方,升级后**收窄失效**(名单外的工具照常可用)。
-     *  🔴 **对照(server ≥7.116.0)**:请求自带技能的 {@link import("./types.js").SkillSpec.allowedTools 清单} + `userInvokedSkills` 点名**比本键宽** —— 它还清掉内置工具上引擎自己的写门 / shell 普通问
-     *  (被认可的放宽,托管 / 多租户部署不设开关);本键在同版仍只是表态。两只请求级放行源的读法将在引擎的下一版收成一种。 */
+     *  7.116.0 起 422 并给出正确写法 `mcp__github_com__*`,此前被收下)/ 反斜杠 / 超 512 字符,以及**内容形**(`Bash(npm:*)` / `Read(./x)` / `WebFetch(domain:…)`)⇒ **整请求 422**(内容形的常设放行进持久规则店:`/v1/rules/cc-import`,或在卡上答 yes 时留规则)。
+     *  🔴 **旧说法已作废**:本键最早的注把它当「只许这些」的名单 —— 键名不变、读法翻了两次(名单 → 表态 → 免问);把它当白名单用的调用方,升级后**收窄失效**(名单外的工具照常可用)。
+     *  🔴 **对照**:server 7.116.x 上请求自带技能的 {@link import("./types.js").SkillSpec.allowedTools 清单} + `userInvokedSkills` 点名**比本键宽**(还清掉内置工具上引擎自己的写门 / shell 普通问);7.117.0 起两者收成同一读法。 */
     allow?: string[];
     /** Deny-list patterns (hard block; deny short-circuits). */
     deny?: string[];
@@ -171,7 +181,7 @@ export interface SettingsWebSearch {
  *  CC-parity anchor: claude-code-2.1.187 settings-hooks.md. Open at the top level to tolerate deferred CC keys
  *  (`statusLine` — shell UI, shell-host self-managed, never touches the engine; `apiKeyHelper`; `sandbox` advanced). */
 export interface SemaSettings {
-    /** Permission allow/deny/ask + additionalDirectories → SessionPolicyStore (tighten-only). ⚠️ 提交体上的 `allow` 桶在 server ≥7.115.0 是 allow 规则 = 表态,见 {@link SettingsPermissions.allow}。 */
+    /** Permission allow/deny/ask + additionalDirectories → SessionPolicyStore (tighten-only). ⚠️ 提交体上的 `allow` 桶在 server ≥7.115.0 是 allow 规则(7.115.0–7.116.x = 表态,≥7.117.0 = 整份交引擎 allow 层、免问),见 {@link SettingsPermissions.allow}。 */
     permissions?: SettingsPermissions;
     /** Shell hooks (PreToolUse/PostToolUse/UserPromptSubmit) → RunnerDeps.hooks (the shell-hook runner runs them). */
     hooks?: SettingsHooks;

package/dist/settings.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"settings.d.ts","sourceRoot":"","sources":["../src/settings.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,8GAA8G;AAC9G,MAAM,WAAW,mBAAmB;IAClC,sCAAsC;IACtC,IAAI,EAAE,SAAS,CAAC;IAChB;;wJAEoJ;IACpJ,OAAO,EAAE,MAAM,CAAC;IAChB,qFAAqF;IACrF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iHAAiH;IACjH,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAED,gFAAgF;AAChF,MAAM,WAAW,mBAAmB;IAClC;;;;;;;;;;;;;;;;;;;;;;;;gEAwB4D;IAC5D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,2GAA2G;IAC3G,KAAK,EAAE,mBAAmB,EAAE,CAAC;CAC9B;AAED;;;;yEAIyE;AACzE,MAAM,WAAW,aAAa;IAC5B;;;;;;mIAM+H;IAC/H,UAAU,CAAC,EAAE,mBAAmB,EAAE,CAAC;IACnC,gIAAgI;IAChI,WAAW,CAAC,EAAE,mBAAmB,EAAE,CAAC;IACpC,iIAAiI;IACjI,gBAAgB,CAAC,EAAE,mBAAmB,EAAE,CAAC;IACzC,oDAAoD;IACpD,CAAC,KAAK,EAAE,MAAM,GAAG,mBAAmB,EAAE,GAAG,SAAS,CAAC;CACpD;AAED;;;mKAGmK;AACnK,MAAM,WAAW,mBAAmB;IAClC;;;;;;;;;;;;sEAYkE;IAClE,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,4DAA4D;IAC5D,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,4CAA4C;IAC5C,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;IACf,0GAA0G;IAC1G,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC;IACjC;;;;;;;;;;;;;;;;;;;;;;;;;;;iFA2B6E;IAC7E,WAAW,CAAC,EAAE,SAAS,GAAG,aAAa,GAAG,MAAM,GAAG,mBAAmB,GAAG,MAAM,CAAC;IAChF,iHAAiH;IACjH,4BAA4B,CAAC,EAAE,OAAO,CAAC;IACvC,sFAAsF;IACtF,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,gEAAgE;IAChE,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAED,sHAAsH;AACtH,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAEjD;;;;;;gHAMgH;AAChH,MAAM,WAAW,iBAAiB;IAChC,uHAAuH;IACvH,QAAQ,CAAC,EAAE,OAAO,GAAG,QAAQ,GAAG,SAAS,CAAC;IAC1C,mHAAmH;IACnH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qHAAqH;IACrH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gFAAgF;IAChF,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;wHAEwH;AACxH,MAAM,WAAW,YAAY;IAC3B,sLAAsL;IACtL,WAAW,CAAC,EAAE,mBAAmB,CAAC;IAClC,kHAAkH;IAClH,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,0DAA0D;IAC1D,GAAG,CAAC,EAAE,WAAW,CAAC;IAClB,iCAAiC;IACjC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iEAAiE;IACjE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;mHAC+G;IAC/G,SAAS,CAAC,EAAE,iBAAiB,CAAC;IAC9B;;;;;;;;;yGASqG;IACrG,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;;;;;;;;;;;;qEAaiE;IACjE,0BAA0B,CAAC,EAAE,MAAM,CAAC;IACpC;;;;oEAIgE;IAChE,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC;;;;;;;;;;2DAUuD;IACvD,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB"}
+{"version":3,"file":"settings.d.ts","sourceRoot":"","sources":["../src/settings.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,8GAA8G;AAC9G,MAAM,WAAW,mBAAmB;IAClC,sCAAsC;IACtC,IAAI,EAAE,SAAS,CAAC;IAChB;;wJAEoJ;IACpJ,OAAO,EAAE,MAAM,CAAC;IAChB,qFAAqF;IACrF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iHAAiH;IACjH,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAED,gFAAgF;AAChF,MAAM,WAAW,mBAAmB;IAClC;;;;;;;;;;;;;;;;;;;;;;;;gEAwB4D;IAC5D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,2GAA2G;IAC3G,KAAK,EAAE,mBAAmB,EAAE,CAAC;CAC9B;AAED;;;;yEAIyE;AACzE,MAAM,WAAW,aAAa;IAC5B;;;;;;mIAM+H;IAC/H,UAAU,CAAC,EAAE,mBAAmB,EAAE,CAAC;IACnC,gIAAgI;IAChI,WAAW,CAAC,EAAE,mBAAmB,EAAE,CAAC;IACpC,iIAAiI;IACjI,gBAAgB,CAAC,EAAE,mBAAmB,EAAE,CAAC;IACzC,oDAAoD;IACpD,CAAC,KAAK,EAAE,MAAM,GAAG,mBAAmB,EAAE,GAAG,SAAS,CAAC;CACpD;AAED;;;0LAG0L;AAC1L,MAAM,WAAW,mBAAmB;IAClC;;;;;;;;;;;;;;;;;;;;;;oLAsBgL;IAChL,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,4DAA4D;IAC5D,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,4CAA4C;IAC5C,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;IACf,0GAA0G;IAC1G,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC;IACjC;;;;;;;;;;;;;;;;;;;;;;;;;;;iFA2B6E;IAC7E,WAAW,CAAC,EAAE,SAAS,GAAG,aAAa,GAAG,MAAM,GAAG,mBAAmB,GAAG,MAAM,CAAC;IAChF,iHAAiH;IACjH,4BAA4B,CAAC,EAAE,OAAO,CAAC;IACvC,sFAAsF;IACtF,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,gEAAgE;IAChE,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAED,sHAAsH;AACtH,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAEjD;;;;;;gHAMgH;AAChH,MAAM,WAAW,iBAAiB;IAChC,uHAAuH;IACvH,QAAQ,CAAC,EAAE,OAAO,GAAG,QAAQ,GAAG,SAAS,CAAC;IAC1C,mHAAmH;IACnH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qHAAqH;IACrH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gFAAgF;IAChF,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;wHAEwH;AACxH,MAAM,WAAW,YAAY;IAC3B,mOAAmO;IACnO,WAAW,CAAC,EAAE,mBAAmB,CAAC;IAClC,kHAAkH;IAClH,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,0DAA0D;IAC1D,GAAG,CAAC,EAAE,WAAW,CAAC;IAClB,iCAAiC;IACjC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iEAAiE;IACjE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;mHAC+G;IAC/G,SAAS,CAAC,EAAE,iBAAiB,CAAC;IAC9B;;;;;;;;;yGASqG;IACrG,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;;;;;;;;;;;;qEAaiE;IACjE,0BAA0B,CAAC,EAAE,MAAM,CAAC;IACpC;;;;oEAIgE;IAChE,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC;;;;;;;;;;2DAUuD;IACvD,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB"}

package/dist/types.d.ts

@@ -57,7 +57,7 @@
  *    null" may be correct — check for a normalizer at the boundary before widening it to `| null`.
  */
 import type { SemaSettings } from "./settings.js";
-import type { AskOrigin, ClassifierUnavailable, DenialLimitFallback, PersistedRuleMandate, RuleOffer, RuleOffersAbsence, ToolApprovalFrame } from "./resources/tool-approvals.js";
+import type { AllowRuleShadow, AskOrigin, ClassifierUnavailable, DenialLimitFallback, PersistedRuleMandate, RuleOffer, RuleOffersAbsence, ToolApprovalFrame } from "./resources/tool-approvals.js";
 /** Authenticated end-user identity. Opaque to the service (used as memory scope + session owner). The SDK
  *  normalizes; the service does NOT validate the format. Convention: `user:` / `org:` / `ai:` / `anon:`. */
 export type Principal = string;
@@ -368,6 +368,12 @@ export interface TaskRequest {
      *  **单独送 `debate:true` 不会有辩论轮**;②`resolve-spec` 的显式组队判据是 `council || debate`
      *  (`:940/1555`)⇒ 单独送它**仍然**会放宽租期预算并抑制自动升档。同样只有字面 `true` 算数。 */
     debate?: boolean;
+    /** 图文输入:`{ data, mimeType }`(内联 base64)或 `{ url }`。
+     *  🔴 **内联臂的准入(server ≥7.117.0 / core 7.42.0)**:`mimeType` 必须是 `image/png` / `image/jpeg` / `image/gif` / `image/webp` 之一(发 API 自己的类型词,不发扩展名),解码后的字节必须带**声明类型**的文件签名,
+     *  解码后不得超 5 MiB —— 过不了 ⇒ 引擎在**第一次模型调用之前**拒(UserPromptSubmit hook 之后,一个模型 token 没烧),**400 `config.image_invalid`**,`error` 以 `TaskSpec.images: ` 起
+     *  (`config.` 不是前缀族 ⇒ 带码的 `APIError`,按 `errorCode` 分支;400 不自动重试)。≤7.116.x 没有这道门:这种图原样送到模型供应方,整只首请求在供应方那边失败(没有本包可依的码)。
+     *  **「base64 太长」不走本码**:一张内联图的 base64 串超过 5 242 880 字符(模型 API 的 5 MB 图片界;server 读引擎导出的同一只常量)⇒ 受理口先拒 **413 `request.payload_too_large`**(零模型调用、不跑提交钩子、不建 run 行)。
+     *  出路:发文件的原样字节与 API 的类型词;超 5 MB 的图先缩。URL 臂(`{ url }`)不变(server 早已按签名认类型)。模型要支持图片输入(见 {@link ModelInfo.vision};缺席 ⇒ 照发)。 */
     images?: Array<{
         data: string;
         mimeType: string;
@@ -1394,7 +1400,10 @@ export interface ModelInfo {
     provider?: string;
     /** 该模型是否 reasoning 档（picker 可标徽章）。 */
     reasoning?: boolean;
-    /** 是否支持图片输入。 */
+    /** 这条目录行**收不收图片输入**,三态(server ≥7.117.0;之前对没声明的条目报 `false`):`true` = 条目声明了 `input` 且含 `"image"`;`false` = 声明了 `input` 且不含它;
+     *  **键缺席 = 条目没声明 `input`**(手写的目录条目;env 车道与配置中心车道恒声明,不会缺席)—— 缺席 = **不知道**,不是 `false`。
+     *  🔴 消费方读法:**缺席 ⇒ 照发并告知**(把图交给 server,由引擎处理;收不收以引擎为准),**不要读成 false(也就是别据此把用户的图拦在本地)** —— server 对同一条目在运行期照样把图交给模型,
+     *  拦截只会让「目录说不知道」变成「用户发不出图」。≤7.116.x 的 server 对没声明的条目报 `false`(那是它们的读法,同一个坑);只有明说 `false` 才该提示「这个模型不收图」。 */
     vision?: boolean;
     /** E4（shell-host；service src/http/routes/capabilities.ts，SHIPPED）— 上下文窗口 token 总额 = 「% 上下文已用 / 距 compact N
      *  token / 低上下文告警」仪表的**分母**。soft-degrade：未知（0）则 service 省略 → 壳渲染裸 token 数无 %。
@@ -3250,19 +3259,26 @@ export interface SkillSpec {
      *  🔴 **读法变了:它不是围栏**(≤7.115.x 引擎 7.40 把它当「只许这些」的围栏读)—— 7.116.0 起**没列的工具照常判**(询问类模式下问、
      *  `bypassPermissions` 或部署 allow 下直接跑),不再因为没列被拒;**列着的工具在这只技能被激活之后、本 run 内免问**
      *  (激活 = 请求顶层 {@link TaskRequest.userInvokedSkills} 点了它的名〔开跑即生效、不出 `Skill` 卡〕,或模型调 `Skill` 激活且那张卡被批准)。
-     *  清的是引擎的普通问与「没人表态」两类问,所以**比同版 `settings.permissions.allow` 更宽**(后者仍只是表态,不放内置工具上引擎自己的
-     *  写门 / shell 普通问);deny 规则 / ask 规则 / `APPROVAL_REQUIRE` / `APPROVAL_NEVER_AUTO` / shell 地板 / 写保护 / plan 模式的问,清单都清不掉。
+     *  清的是引擎的普通问与「没人表态」两类问;deny 规则 / ask 规则 / `APPROVAL_REQUIRE` / `APPROVAL_NEVER_AUTO` / shell 地板 / 写保护 / plan 模式的问,清单都清不掉。
+     *  🔴 **与 `settings.permissions.allow` 的关系随 server 代际变(7.117.0 起收成一种读法)**:**≥7.117.0**(能力位 `settings.permissions.allowLayer`,core 7.42.0)两只请求级放行源是**同一读法**
+     *  —— 同一条条目逐格同读(都进引擎的 allow 层、都清内置工具的写门 / shell 普通问、读成空的条目都发通告 `permission.allowed_tool_not_granted`);**7.116.x 上**请求自带技能的清单
+     *  **比同版 `settings.permissions.allow` 更宽**(后者当时只是表态,不放内置工具上引擎自己的写门 / shell 普通问)—— 那一口径到 7.116.x 为止。
      *  值形:字符串数组(含空数组)⇒ 受理;裸串 / 含非串 / 对象 ⇒ 400 `request.field_invalid`;协议名的服务器段铸不出 / 缺段 / 带通配(`mcp__*`)⇒ 400
-     *  (顶层 `skills[]` 与子代 `agents[].skills[]` 两处受理口同判)。
+     *  (顶层 `skills[]` 与子代 `agents[].skills[]` 两处受理口同判)。🔴 **7.117.0 起另有两道**(两张清单、顶层与子代两处受理口同判):**名字层**与 `settings.permissions.allow` 同一只判官 —— 退役名 / 无前缀短名(例 `Task`)
+     *  提交即 400(7.116.x 受理,引擎读作一个永不命中的名字);每张清单**超过 1000 条** ⇒ 400(句子给写法「合并成更宽的条目」;7.116.x 无帽)。
      *  🔴 **先探 `capabilities.skillToolLists`**:位缺席 = 老 server ⇒ 顶层技能上的两只清单**照收但引擎不读**(静默不生效,没有 400 可探 ——
      *  别指望清单拦得住工具,圈工具用 deny 规则),子代技能上是未知键整条拒。
      *  🔴 `manifest` 键 server ≥7.116.0 **提交即拒**(顶层 400 `request.field_invalid`、子代整条技能拒);改写 `manifest.allowTools` → 本键;
      *  写围栏 `allowPaths` 没有替身(圈写路径用会话规则 `allowDirs`)。本型从不声明 `manifest` ⇒ 顶层按型写不出它。 */
     allowedTools?: string[];
     /** server ≥7.116.0:这只技能的 **deny 规则来源**(同 {@link allowedTools} 的文法 / 两道受理门 / 探测位):技能被激活之后,本 run 内这些工具**拒**(不执行、零卡,
-     *  `tool_end.gate.disposition` 为 `{ kind: "denied", deniedBy: "policy" }`)。`*` 与域名形(`WebFetch(domain:…)`)在这一侧也读作「无」—— 受理 2xx,
-     *  只进运维面通告 `skills.allowed_tool_not_granted`(core 引擎通告,受众 operator,不上会话流);写路径形(`Write(/tmp/**)`)与其余条目照编 deny 行
-     *  (这两句取自 server 契约 / 判据 C2.d·C19.e 对 core `compileSkillGrant` 读数的转述;core 的通告文案把「写路径 / 域名」一并列为「grant or refuse nothing」,**本包未亲跑引擎**核 deny 侧的写路径形)。位缺席 = 老 server(见 {@link allowedTools})。 */
+     *  `tool_end.gate.disposition` 为 `{ kind: "denied", deniedBy: "policy" }`);写路径形(`Write(/tmp/**)`)与命令规则照编 deny 行。
+     *  🔴 **server ≥7.117.0:引擎读成空的条目提交即 400**(顶层 `skills[]` 与子代 `agents[].skills[]` 两处受理口同判)—— `*`、域名形(`WebFetch(domain:…)`)、协议名带通配、带空白 / 畸形的名字:
+     *  `400 request.field_invalid`,`error` = `skill.disallowedTools entry "<条目>" reads as nothing (<原因词>): <怎么写>`(子代那一层前缀 `agents[<i>]: skills[<j>]: `)。
+     *  为什么拒:一条以为拒了、其实什么也不拒的条目,比没有更坏(≤7.116.x 受理这种条目,只发一条 operator 受众、不上会话流的通告;**那个旧码已改名**为 `permission.allowed_tool_not_granted`,user 受众、上会话流 —— 见 `engine_notice` 臂)。
+     *  🔴 **续跑同判**:升级时还停驻、提交体里带这种条目的任务,续跑 ⇒ 认领之前 **409 `resume_blocked_by_policy`**(`blockedBy:"request.field_invalid"`,`error` 带同一句;行与卡一个字节不动,出路 = 取消、改好条目重提;
+     *  终态 run 的 `POST /v1/runs/:id/steer` 在铸唤醒卡之前当场同答)—— 因为引擎 7.41 去首尾空白(`"Bash "` 曾是一条有效的拒)而 7.42 逐字读(读成空),不判就是升级后那条拒无声消失。
+     *  allow 侧不拒(`allowedTools` 里读成空的条目发通告)。位缺席 = 老 server(见 {@link allowedTools})。 */
     disallowedTools?: string[];
 }
 /** A per-request MCP server (CC `.mcp.json` parity) — core-native `McpServerSpec` shape (core types.ts:277).
@@ -3684,15 +3700,20 @@ export interface Capabilities {
         hooks?: boolean;
         [k: string]: unknown;
     };
-    /** 🔴 **server ≥7.115.0 起恒在**:`{ permissions: { allowGrant: true } }` —— 「请求体 `settings.permissions.allow` 按**哪一种读法**收」的**版本位**(S-654;wire additive,新顶层键)。
-     *  `permissions.allowGrant === true` = 这台 server 把 `allow` 桶编成 **allow 规则**:命中 = 给出「有人表态」(让没人表态的 MCP / A2A 服务器工具调用不再出卡),**不是免问、不是名单**
-     *  (名单外的工具不再被拒;引擎对内置工具的写门 / shell 检查照问,deny / ask 照赢;坏形 / 内容形名字提交即 422 —— 读法全文见 {@link import("./settings.js").SettingsPermissions.allow})。
-     *  🔴 **键缺席 = 老 server(≤7.114.x,按名单读 `allow`:名单外一律拒)—— 别投 allow 桶**(投了只是一份收窄,方向安全,但不是你要的「表态」)。
+    /** 🔴 **server ≥7.115.0 起恒在**:`{ permissions: { allowGrant: true } }`;**≥7.117.0 起 `permissions` 多一位 `allowLayer: true`** —— 「请求体 `settings.permissions.allow` 按**哪一种读法**收」的**版本位**(wire additive;两位都是恒真、
+     *  不随部署形变:单用户与 `REQUIRE_PRINCIPAL=true` 两形同值,不挂任何设施)。逐位读,三段读 `settings` → `permissions` → <位>:
+     *  · `allowGrant === true`(≥7.115.0)= 两代都成立的那句话:**allow 桶按 allow 规则读,不是名单**(名单外的工具不再被拒);键缺席 = 老 server(≤7.114.x,按名单读)—— **别投 allow 桶**(投了只是一份收窄,方向安全,但不是你要的)。
+     *  · `allowLayer === true`(**≥7.117.0**,core 7.42.0)= 这台 server 把 `allow` **整份原样**交给引擎的 **allow 层**:表里的调用**免问** —— 清「普通问 + 没人表态」两类(内置工具的写门 / shell 普通问也清,与参照实现的 `permissions.allow` 同读);
+     *    **内容形受理**(`Bash(git:*)`、`Read(//dir/<glob>)`);引擎读成空的条目(`*`、写路径 / 域名形、带空白的名字、`Read(~/…)`)**不拒**,开跑时收 `engine_notice` `permission.allowed_tool_not_granted`(user 受众);
+     *    清不掉的:任何一层的 deny / ask 规则、运维强制类(`APPROVAL_REQUIRE` / `APPROVAL_NEVER_AUTO` / `MANUAL_MODE_SHELL_GATE=always` / 写保护 / 敏感写 / 治理)、hook 的问、plan 的问 —— 清不掉而命中时卡上带 `allowRuleShadowed`
+     *    ({@link import("./resources/tool-approvals.js").ToolApprovalFrame.allowRuleShadowed});受理口只判**名字**(退役名 / 无前缀短名 / 协议名对端段铸不出 ⇒ 422)与条数(≤1000,超了 400),内容不判。
+     *    🔴 **键缺席 = 7.115.0–7.116.x(allow 只表态:不放掉内置工具的写门 / shell 检查,内容形整请求 422)或更老 —— 别指望内置工具免问、别投内容形**。
      *  ⚠️ 与 `taskSettings.permissions` 不是一件事:那一位不变、仍是布尔(只说「受理这一面」,读 `=== true` 的旧端不失明);判 allow 的读法只看本位。
-     *  本位是**版本位**:恒 `true`、不随部署形变;部署级「替谁表了态」(运维 env `APPROVAL_GRANT`)不在能力面,在 operator 诊断面 {@link ServerWiringGates.approvalGrant}。 */
+     *  运维侧「替谁表了态」(env `APPROVAL_GRANT`)不在能力面,在 operator 诊断面 {@link ServerWiringGates.approvalGrant}。 */
     settings?: {
         permissions?: {
             allowGrant?: boolean;
+            allowLayer?: boolean;
             [k: string]: unknown;
         };
         [k: string]: unknown;
@@ -4608,6 +4629,13 @@ export interface PendingCheckpoint {
         /** core 5.11.0([2625] Added②):铸造时在场的 shell 门 doctrine 自报——仅 shell-gated ask 铸造
          *  时在场(在场条件敏感,勿按在场性判别 code;[2597] 案取证缺口的结构性补)。 */
         shellGateDoctrine?: "classify" | "always";
+        /** server ≥7.117.0(core 7.42.0)—— allow 层披露:命中这次调用、却没能清掉这只 ask 的成员,`{ member, entries, omitted? }[]`(见 {@link AllowRuleShadow};
+         *  语义逐字见 {@link import("./resources/tool-approvals.js").ToolApprovalFrame.allowRuleShadowed} —— 本键是它的**耐久对偶**,经 `GET /v1/approvals` 与 `/stream` 的 `riskDescriptor`
+         *  整体透传;条目在读边界另过 server 的脱敏)。缺席 ≠ 「你没有规则」。
+         *  🔴 **旧键 `shadowedRule`(字符串)已退役**(≤7.116.x 的耐久对偶,本型从未声明它):SQL 后端在 7.117.0 升级起服时把停驻行一次性改写成
+         *  `[{ member: "persisted", entries: [<旧值>] }]`;**file 后端升级前的停驻行与已落盘的 run 结果**(`checkpointGate.riskDescriptor`)上旧键原样留着(文本仍脱敏,只缺结构化披露)——
+         *  读这两处的消费端要同时认得「旧串」,本包不为它再声明一个键。 */
+        allowRuleShadowed?: AllowRuleShadow[];
     } | null;
     [k: string]: unknown;
 }