ResolvedApprovals
Defined in: _worktrees/docs-release/gaunt-sloth/packages/core/src/config/shell-policy.ts:646
The fully-defaulted approvals posture for one command. allow/deny/escalate are the
declared lists straight from config — read-only input that the runner merges with the
runtime stores the escalation menu writes, and that is never written back to config (§9.1).
Properties
Section titled “Properties”allow:
ApprovalEntry[]
Defined in: _worktrees/docs-release/gaunt-sloth/packages/core/src/config/shell-policy.ts:652
Declared allow-list entries (§3.1). Empty when none are declared.
deny:
ApprovalEntry[]
Defined in: _worktrees/docs-release/gaunt-sloth/packages/core/src/config/shell-policy.ts:654
Declared deny-list entries (§3.1). Empty when none are declared.
escalate
Section titled “escalate”escalate:
ApprovalEntry[]
Defined in: _worktrees/docs-release/gaunt-sloth/packages/core/src/config/shell-policy.ts:656
Declared escalate-list entries (§3.1). Empty when none are declared.
optionalmcp?:McpApprovalsConfig
Defined in: _worktrees/docs-release/gaunt-sloth/packages/core/src/config/shell-policy.ts:669
EXT-70 §4.7 — the declared per-server MCP relationship, or undefined when no scope states
one (which reads the same as an empty block: nothing external is believed). Left undefined
rather than defaulted here for the same reason rater is — so the effective-config snapshot
does not churn.
rater?
Section titled “rater?”
optionalrater?:string
Defined in: _worktrees/docs-release/gaunt-sloth/packages/core/src/config/shell-policy.ts:650
Identity profile the rater runs under, or undefined for the session model.
raterTimeoutMs?
Section titled “raterTimeoutMs?”
optionalraterTimeoutMs?:number
Defined in: _worktrees/docs-release/gaunt-sloth/packages/core/src/config/shell-policy.ts:662
EXT-66 — wall-clock budget (ms) for one rating call, or undefined to let the rater apply
RATER_DEFAULT_TIMEOUT_MS. Left undefined rather than defaulted here so the effective-config
snapshot does not churn, exactly as rater is.
rung:
"read-only"|"write"|"auto-safe"|"full-auto"|"bypass"
Defined in: _worktrees/docs-release/gaunt-sloth/packages/core/src/config/shell-policy.ts:648
The rung in force.