APPROVAL_ENTRY_TYPES

const APPROVAL_ENTRY_TYPES: readonly ["shell", "tool", "mcpTool"]

Defined in: _worktrees/docs-release/gaunt-sloth/packages/core/src/config/schema.ts:173

EXT-71 §3.1 — the subject axis of a rule entry, and only that: shell is a command, tool a built-in or custom in-process tool, mcpTool a server’s tool. The hand-written twin is ApprovalEntryType in shell-policy.ts. What holds the two together is approvalEntrySchema.spec.ts, where a list of ApprovalEntry-typed literals is parsed by this schema: a value either side stops accepting fails there. That is a weaker pin than a direct equality assertion — it catches a narrowing, not a widening on one side alone.