Under the hood
Nothing to try yet No documentation found
Publish now tracks approved asset-copy sources per session so consent persists.
The artifact publish permission-check path now threads an approvedCopySources set, keyed by toolUseId, through the publish flow, minted into the tool-call metadata (copies) alongside existing path/redirect/sha256 pin data. This is the plumbing that lets copy_from's per-session consent persist without re-prompting.
Names in the bundlecopy_from