Under the hoodTier: how much it should matter to you
1Useful: my rating, 1 to 5
2Signal: worth watching, 1 to 5
ArtifactsArea: what it touches
Internal ChangesKind: in v2.1.260,
Internal ChangesSection of the release
The artifact publish permission-check path now threads an approvedCopySources set, keyed by toolUseId, through the publish flow, minted into the tool-call metadata (copies) alongside existing path/redirect/sha256 pin data. This is the plumbing that lets copy_from's per-session consent persist without re-prompting.
