ResolvedApprovals

Defined in: core/dist/config/shell-policy.d.ts:466

The fully-defaulted approvals posture for one command. allow/deny/escalate are the declared lists straight from config — read-only input that the runner merges with the runtime stores the escalation menu writes, and that is never written back to config (§9.1).

Properties

allow

allow: ApprovalEntry[]

Defined in: core/dist/config/shell-policy.d.ts:472

Declared allow-list entries (§3.1). Empty when none are declared.

---

deny

deny: ApprovalEntry[]

Defined in: core/dist/config/shell-policy.d.ts:474

Declared deny-list entries (§3.1). Empty when none are declared.

---

escalate

escalate: ApprovalEntry[]

Defined in: core/dist/config/shell-policy.d.ts:476

Declared escalate-list entries (§3.1). Empty when none are declared.

---

mcp?

optional mcp?: McpApprovalsConfig

Defined in: core/dist/config/shell-policy.d.ts:489

EXT-70 §4.7 — the declared per-server MCP relationship, or undefined when no scope states one (which reads the same as an empty block: nothing external is believed). Left undefined rather than defaulted here for the same reason rater is — so the effective-config snapshot does not churn.

---

rater?

optional rater?: string

Defined in: core/dist/config/shell-policy.d.ts:470

Identity profile the rater runs under, or undefined for the session model.

---

raterTimeoutMs?

optional raterTimeoutMs?: number

Defined in: core/dist/config/shell-policy.d.ts:482

EXT-66 — wall-clock budget (ms) for one rating call, or undefined to let the rater apply RATER_DEFAULT_TIMEOUT_MS. Left undefined rather than defaulted here so the effective-config snapshot does not churn, exactly as rater is.

---

rung

rung: "read-only" | "write" | "auto-safe" | "full-auto" | "bypass"

Defined in: core/dist/config/shell-policy.d.ts:468

The rung in force.