Skip to content

describeWeakenedGrant

describeWeakenedGrant(entry, weakened, snapshot, current): string

Defined in: _worktrees/docs-release/gaunt-sloth/packages/core/src/core/approvals/grants.ts:397

§4.7.4 — the notice a weakened grant is removed with. It names the tool, the server and the hint that moved, because the human approved a tool as annotated: a tool that re-annotates itself into a more dangerous shape is a different proposition wearing the same name, and a notice that did not say which name changed would be indistinguishable from the gate malfunctioning.

It takes the entry rather than the call’s subject, so it describes the grant that was actually withdrawn — including its host bound, where it had one. One call may withdraw both a host-bound grant and a tool-only one, and two notices that could not be told apart would be worse than one. The entry is rendered by describeApprovalEntry, the same one-liner every other provenance message uses.

ApprovalEntry

readonly ("readOnlyHint" | "destructiveHint" | "idempotentHint" | "openWorldHint")[]

EffectiveToolAnnotations

EffectiveToolAnnotations

string