From 39468b0441ddb46aa24a27d2efd6d6a2662ef392 Mon Sep 17 00:00:00 2001
From: marius-kilocode <marius@kilocode.ai>
Date: Thu, 9 Jul 2026 17:43:25 +0200
Subject: [PATCH 1/2] fix(vscode): clarify effective permissions

---
 .changeset/quiet-permissions-speak.md         |  5 +++
 .../tests/permission-dock-dropdown.spec.ts    |  2 +-
 .../tests/unit/permission-description.test.ts | 10 +++---
 .../tests/unit/permission-editor.test.ts      | 28 ++++++++++++++++
 .../src/components/chat/PermissionDock.tsx    |  2 +-
 .../components/settings/AutoApproveTab.tsx    |  4 +++
 .../components/settings/PermissionEditor.tsx  | 33 +++++++++++++------
 .../components/settings/permission-utils.ts   | 23 +++++++++++++
 .../kilo-vscode/webview-ui/src/i18n/ar.ts     |  2 +-
 .../kilo-vscode/webview-ui/src/i18n/br.ts     |  2 +-
 .../kilo-vscode/webview-ui/src/i18n/bs.ts     |  2 +-
 .../kilo-vscode/webview-ui/src/i18n/da.ts     |  2 +-
 .../kilo-vscode/webview-ui/src/i18n/de.ts     |  2 +-
 .../kilo-vscode/webview-ui/src/i18n/en.ts     |  2 +-
 .../kilo-vscode/webview-ui/src/i18n/es.ts     |  2 +-
 .../kilo-vscode/webview-ui/src/i18n/fr.ts     |  2 +-
 .../kilo-vscode/webview-ui/src/i18n/it.ts     |  2 +-
 .../kilo-vscode/webview-ui/src/i18n/ja.ts     |  2 +-
 .../kilo-vscode/webview-ui/src/i18n/ko.ts     |  2 +-
 .../kilo-vscode/webview-ui/src/i18n/nl.ts     |  2 +-
 .../kilo-vscode/webview-ui/src/i18n/no.ts     |  2 +-
 .../kilo-vscode/webview-ui/src/i18n/pl.ts     |  2 +-
 .../kilo-vscode/webview-ui/src/i18n/ru.ts     |  2 +-
 .../kilo-vscode/webview-ui/src/i18n/th.ts     |  2 +-
 .../kilo-vscode/webview-ui/src/i18n/tr.ts     |  2 +-
 .../kilo-vscode/webview-ui/src/i18n/uk.ts     |  2 +-
 .../kilo-vscode/webview-ui/src/i18n/zh.ts     |  2 +-
 .../kilo-vscode/webview-ui/src/i18n/zht.ts    |  2 +-
 .../src/stories/settings.stories.tsx          | 12 +++++++
 29 files changed, 122 insertions(+), 37 deletions(-)
 create mode 100644 .changeset/quiet-permissions-speak.md

diff --git a/.changeset/quiet-permissions-speak.md b/.changeset/quiet-permissions-speak.md
new file mode 100644
index 00000000000..2621bf9a0c5
--- /dev/null
+++ b/.changeset/quiet-permissions-speak.md
@@ -0,0 +1,5 @@
+---
+"kilo-code": patch
+---
+
+Show effective permission defaults and clarify external-directory approvals in VS Code.
diff --git a/packages/kilo-vscode/tests/permission-dock-dropdown.spec.ts b/packages/kilo-vscode/tests/permission-dock-dropdown.spec.ts
index ac94c151cc1..d02abe99b1a 100644
--- a/packages/kilo-vscode/tests/permission-dock-dropdown.spec.ts
+++ b/packages/kilo-vscode/tests/permission-dock-dropdown.spec.ts
@@ -211,7 +211,7 @@ test.describe("Permission Dock Dropdown — external directory", () => {
     await page.waitForSelector("#storybook-root *", { state: "attached" })
     await openDropdown(page)
 
-    const text = "Read External Directory /Users/developer/projects/kilo-bench/dashboard/app/routes/*"
+    const text = "Access External Directory /Users/developer/projects/kilo-bench/dashboard/app/routes/*"
     const hint = page.locator('[data-slot="permission-hint"]')
     await expect(hint).toHaveText(text)
     await expect(hint).toHaveAttribute("title", text)
diff --git a/packages/kilo-vscode/tests/unit/permission-description.test.ts b/packages/kilo-vscode/tests/unit/permission-description.test.ts
index b9cff740003..8137952a9ba 100644
--- a/packages/kilo-vscode/tests/unit/permission-description.test.ts
+++ b/packages/kilo-vscode/tests/unit/permission-description.test.ts
@@ -18,7 +18,7 @@ const labels: Record<string, string> = {
   "ui.permission.toolLabel.webSearch": "Web Search",
   "ui.permission.toolLabel.list": "List",
   "ui.permission.toolLabel.bash": "Bash",
-  "ui.permission.toolLabel.externalDirectory": "Read External Directory",
+  "ui.permission.toolLabel.externalDirectory": "Access External Directory",
   "ui.permission.toolLabel.webFetch": "Web Fetch",
   "ui.permission.toolLabel.codeSearch": "Code Search",
   "ui.permission.toolLabel.todoRead": "Todo Read",
@@ -79,9 +79,9 @@ describe("describePatterns", () => {
     expect(result).toEqual({ kind: "single", text: "Edit file.ts" })
   })
 
-  test("external_directory uses Read External Directory label", () => {
+  test("external_directory uses Access External Directory label", () => {
     const result = describePatterns("external_directory", ["/home/user/project/*"], t)
-    expect(result).toEqual({ kind: "single", text: "Read External Directory /home/user/project/*" })
+    expect(result).toEqual({ kind: "single", text: "Access External Directory /home/user/project/*" })
   })
 
   test("glob tool uses Glob Search label", () => {
@@ -181,7 +181,7 @@ describe("describeRule", () => {
 
   test("preserves existing permission rule labels", () => {
     expect(describeRule("read", "*", t)).toBe("Read")
-    expect(describeRule("external_directory", "*", t)).toBe("Read External Directory")
+    expect(describeRule("external_directory", "*", t)).toBe("Access External Directory")
     expect(describeRule("read", "src/app.ts", t)).toBe("Read src/app.ts")
   })
 })
@@ -214,7 +214,7 @@ describe("resolveLabel", () => {
       grep: "Grep Search",
       list: "List",
       bash: "Bash",
-      external_directory: "Read External Directory",
+      external_directory: "Access External Directory",
       webfetch: "Web Fetch",
       websearch: "Web Search",
       codesearch: "Code Search",
diff --git a/packages/kilo-vscode/tests/unit/permission-editor.test.ts b/packages/kilo-vscode/tests/unit/permission-editor.test.ts
index 0d8122f97f4..ce32cbd190b 100644
--- a/packages/kilo-vscode/tests/unit/permission-editor.test.ts
+++ b/packages/kilo-vscode/tests/unit/permission-editor.test.ts
@@ -3,10 +3,12 @@ import {
   addExceptionPatch,
   clearGroupedPatch,
   clearWildcardPatch,
+  DEFAULT_RULES,
   inheritedWildcard,
   mostRestrictive,
   permissionExceptions,
   removeExceptionPatch,
+  ruleset,
   setExceptionPatch,
   setGroupedPatch,
   setWildcardPatch,
@@ -45,6 +47,31 @@ describe("effectiveRuleLevel", () => {
   })
 })
 
+describe("ruleset", () => {
+  it("preserves backend defaults when config only customizes bash", () => {
+    const rules = [...DEFAULT_RULES, ...ruleset({ bash: { "*": "ask", "git status *": "allow" } })]
+
+    expect(effectiveRuleLevel(rules, "edit")).toBe("allow")
+    expect(effectiveRuleLevel(rules, "external_directory")).toBe("ask")
+    expect(effectiveRuleLevel(rules, "bash")).toBe("ask")
+    expect(effectiveRuleLevel(rules, "doom_loop")).toBe("ask")
+  })
+
+  it("applies top-level wildcards and direct rules in config order", () => {
+    const broadLast = [...DEFAULT_RULES, ...ruleset({ edit: "allow", "*": "ask" })]
+    const directLast = [...DEFAULT_RULES, ...ruleset({ "*": "ask", edit: "allow" })]
+
+    expect(effectiveRuleLevel(broadLast, "edit")).toBe("ask")
+    expect(effectiveRuleLevel(directLast, "edit")).toBe("allow")
+  })
+
+  it("skips config delete sentinels", () => {
+    expect(ruleset({ edit: null, bash: { "*": null, "git status *": "allow" } })).toEqual([
+      { permission: "bash", pattern: "git status *", action: "allow" },
+    ])
+  })
+})
+
 describe("PermissionEditor inherited wildcard state", () => {
   it("distinguishes inherited defaults from explicit wildcard rules", () => {
     expect(wildcardAction(undefined, "ask")).toBe("ask")
@@ -68,6 +95,7 @@ describe("PermissionEditor patch generation", () => {
   })
 
   it("preserves exceptions when changing wildcard overrides", () => {
+    expect(setWildcardPatch(undefined, "edit", "ask")).toEqual({ edit: "ask" })
     expect(setWildcardPatch({ "*": "deny", "src/**": "allow", "dist/**": null }, "edit", "ask")).toEqual({
       edit: { "*": "ask", "src/**": "allow" },
     })
diff --git a/packages/kilo-vscode/webview-ui/src/components/chat/PermissionDock.tsx b/packages/kilo-vscode/webview-ui/src/components/chat/PermissionDock.tsx
index 8f142249048..0a5d95c5aee 100644
--- a/packages/kilo-vscode/webview-ui/src/components/chat/PermissionDock.tsx
+++ b/packages/kilo-vscode/webview-ui/src/components/chat/PermissionDock.tsx
@@ -309,7 +309,7 @@ export const PermissionDock: Component<{
             }}
             disabled={props.responding}
           >
-            {language.t("ui.permission.run")}
+            {language.t("ui.permission.allowOnce")}
           </Button>
           <Button
             variant="ghost"
diff --git a/packages/kilo-vscode/webview-ui/src/components/settings/AutoApproveTab.tsx b/packages/kilo-vscode/webview-ui/src/components/settings/AutoApproveTab.tsx
index 21e87583e51..5032e4367b9 100644
--- a/packages/kilo-vscode/webview-ui/src/components/settings/AutoApproveTab.tsx
+++ b/packages/kilo-vscode/webview-ui/src/components/settings/AutoApproveTab.tsx
@@ -5,6 +5,7 @@ import { TextField } from "@kilocode/kilo-ui/text-field"
 import { useConfig } from "../../context/config"
 import { useLanguage } from "../../context/language"
 import PermissionEditor from "./PermissionEditor"
+import { DEFAULT_RULES } from "./permission-utils"
 import SettingsRow from "./SettingsRow"
 
 const AutoApproveTab: Component = () => {
@@ -54,7 +55,10 @@ const AutoApproveTab: Component = () => {
 
       <PermissionEditor
         permissions={permissions()}
+        rules={DEFAULT_RULES}
         description={language.t("settings.autoApprove.description")}
+        inherited
+        showDefaultLevel
         onChange={(patch) => updateConfig({ permission: patch })}
       />
     </div>
diff --git a/packages/kilo-vscode/webview-ui/src/components/settings/PermissionEditor.tsx b/packages/kilo-vscode/webview-ui/src/components/settings/PermissionEditor.tsx
index 6b85a90646e..97e6f3d0328 100644
--- a/packages/kilo-vscode/webview-ui/src/components/settings/PermissionEditor.tsx
+++ b/packages/kilo-vscode/webview-ui/src/components/settings/PermissionEditor.tsx
@@ -14,10 +14,10 @@ import {
   mostRestrictive,
   permissionExceptions,
   removeExceptionPatch,
+  ruleset,
   setExceptionPatch,
   setGroupedPatch,
   setWildcardPatch,
-  wildcardAction,
   type PermissionPatch,
 } from "./permission-utils"
 
@@ -136,12 +136,13 @@ const PermissionEditor: Component<{
   description?: string
   component?: string
   inherited?: boolean
+  showDefaultLevel?: boolean
   onChange: (patch: PermissionPatch) => void
 }> = (props) => {
   const perms = createMemo(() => props.permissions ?? {})
+  const rules = createMemo(() => [...(props.rules ?? []), ...ruleset(perms())])
 
-  const levelFor = (tool: string): PermissionLevel =>
-    wildcardAction(perms()[tool], effectiveRuleLevel(props.rules, tool))
+  const levelFor = (tool: string): PermissionLevel => effectiveRuleLevel(rules(), tool)
 
   const ruleFor = (tool: string): PermissionRule | undefined => perms()[tool]
 
@@ -205,6 +206,7 @@ const PermissionEditor: Component<{
             fallback={levelFor(tool.id)}
             inherited={props.inherited && inheritedWildcard(ruleFor(tool.id))}
             allowInherit={props.inherited}
+            showDefaultLevel={props.showDefaultLevel}
             onWildcardChange={(level) => setWildcard(tool.id, level)}
             onWildcardInherit={() => clearWildcard(tool.id)}
             onExceptionChange={(pattern, level) => setException(tool.id, pattern, level)}
@@ -220,7 +222,8 @@ const PermissionEditor: Component<{
             id={tool.id}
             descriptionKey={tool.descriptionKey}
             level={levelFor(tool.id)}
-            inherited={props.inherited && ruleFor(tool.id) === undefined}
+            inherited={props.inherited && inheritedWildcard(ruleFor(tool.id))}
+            showDefaultLevel={props.showDefaultLevel}
             onChange={(level) => setSimple(tool.id, level)}
             onInherit={() => clearSimple(tool.id)}
           />
@@ -233,7 +236,8 @@ const PermissionEditor: Component<{
             id={group.label}
             descriptionKey={group.descriptionKey}
             level={mostRestrictive(group.ids.map(levelFor))}
-            inherited={props.inherited && group.ids.every((id) => ruleFor(id) === undefined)}
+            inherited={props.inherited && group.ids.every((id) => inheritedWildcard(ruleFor(id)))}
+            showDefaultLevel={props.showDefaultLevel}
             onChange={(level) => setGrouped(group.ids, level)}
             onInherit={() => clearGrouped(group.ids)}
           />
@@ -246,7 +250,8 @@ const PermissionEditor: Component<{
             id={tool.id}
             descriptionKey={tool.descriptionKey}
             level={levelFor(tool.id)}
-            inherited={props.inherited && ruleFor(tool.id) === undefined}
+            inherited={props.inherited && inheritedWildcard(ruleFor(tool.id))}
+            showDefaultLevel={props.showDefaultLevel}
             onChange={(level) => setSimple(tool.id, level)}
             onInherit={() => clearSimple(tool.id)}
           />
@@ -261,6 +266,7 @@ const SimpleToolRow: Component<{
   descriptionKey: string
   level: PermissionLevel
   inherited?: boolean
+  showDefaultLevel?: boolean
   onChange: (level: PermissionLevel) => void
   onInherit?: () => void
 }> = (props) => {
@@ -293,6 +299,7 @@ const SimpleToolRow: Component<{
       <ActionSelect
         level={props.level}
         inherited={props.inherited}
+        showDefaultLevel={props.showDefaultLevel}
         onChange={props.onChange}
         onInherit={props.onInherit}
       />
@@ -306,6 +313,7 @@ const GranularToolRow: Component<{
   fallback: PermissionLevel
   inherited?: boolean
   allowInherit?: boolean
+  showDefaultLevel?: boolean
   onWildcardChange: (level: PermissionLevel) => void
   onWildcardInherit: () => void
   onExceptionChange: (pattern: string, level: PermissionLevel) => void
@@ -325,8 +333,6 @@ const GranularToolRow: Component<{
   const excs = createMemo(() => permissionExceptions(props.rule))
   const expanded = createMemo(() => override() ?? excs().length <= 5)
   const toggle = () => setOverride(!expanded())
-  const level = createMemo(() => wildcardAction(props.rule, props.fallback))
-
   const submit = () => {
     const val = input().trim()
     if (val) {
@@ -375,8 +381,9 @@ const GranularToolRow: Component<{
           </div>
         </div>
         <ActionSelect
-          level={level()}
+          level={props.fallback}
           inherited={props.inherited}
+          showDefaultLevel={props.showDefaultLevel}
           onChange={props.onWildcardChange}
           onInherit={props.allowInherit ? props.onWildcardInherit : undefined}
         />
@@ -524,17 +531,23 @@ const GranularToolRow: Component<{
 const ActionSelect: Component<{
   level: PermissionLevel
   inherited?: boolean
+  showDefaultLevel?: boolean
   onChange: (level: PermissionLevel) => void
   onInherit?: () => void
 }> = (props) => {
   const language = useLanguage()
   const opts = createMemo(() => (props.onInherit ? [INHERIT_OPTION, ...LEVEL_OPTIONS] : LEVEL_OPTIONS))
+  const label = (option: LevelOption) => {
+    if (option.value !== "inherit" || !props.showDefaultLevel) return language.t(option.labelKey)
+    const level = LEVEL_OPTIONS.find((item) => item.value === props.level)!
+    return `${language.t(option.labelKey)} (${language.t(level.labelKey)})`
+  }
   return (
     <Select
       options={opts()}
       current={props.inherited ? INHERIT_OPTION : LEVEL_OPTIONS.find((option) => option.value === props.level)}
       value={(option) => option.value}
-      label={(option) => language.t(option.labelKey)}
+      label={label}
       onSelect={(option) => {
         if (!option) return
         if (option.value === "inherit") {
diff --git a/packages/kilo-vscode/webview-ui/src/components/settings/permission-utils.ts b/packages/kilo-vscode/webview-ui/src/components/settings/permission-utils.ts
index ecd2de95678..ae8807b5e85 100644
--- a/packages/kilo-vscode/webview-ui/src/components/settings/permission-utils.ts
+++ b/packages/kilo-vscode/webview-ui/src/components/settings/permission-utils.ts
@@ -4,6 +4,14 @@ export type PermissionPatch = PermissionConfig
 
 const RESTRICTION_ORDER: Record<PermissionLevel, number> = { allow: 0, ask: 1, deny: 2 }
 
+// Keep wildcard defaults aligned with the CLI's base rules and Kilo Bash policy.
+export const DEFAULT_RULES: PermissionRuleItem[] = [
+  { permission: "*", pattern: "*", action: "allow" },
+  { permission: "external_directory", pattern: "*", action: "ask" },
+  { permission: "bash", pattern: "*", action: "ask" },
+  { permission: "doom_loop", pattern: "*", action: "ask" },
+]
+
 function matchTool(tool: string, pattern: string): boolean {
   if (pattern === tool || pattern === "*") return true
   if (!pattern.includes("*")) return false
@@ -20,6 +28,21 @@ export function effectiveRuleLevel(rules: PermissionRuleItem[] | undefined, tool
   return "ask"
 }
 
+export function ruleset(config: PermissionConfig): PermissionRuleItem[] {
+  const result: PermissionRuleItem[] = []
+  for (const [permission, rule] of Object.entries(config)) {
+    if (rule === null || rule === undefined) continue
+    if (typeof rule === "string") {
+      result.push({ permission, pattern: "*", action: rule })
+      continue
+    }
+    for (const [pattern, action] of Object.entries(rule)) {
+      if (action !== null) result.push({ permission, pattern, action })
+    }
+  }
+  return result
+}
+
 export function mostRestrictive(levels: PermissionLevel[]): PermissionLevel {
   return levels.reduce<PermissionLevel>(
     (best, level) => (RESTRICTION_ORDER[level] > RESTRICTION_ORDER[best] ? level : best),
diff --git a/packages/kilo-vscode/webview-ui/src/i18n/ar.ts b/packages/kilo-vscode/webview-ui/src/i18n/ar.ts
index 7041e5f9c95..5d7076a184b 100644
--- a/packages/kilo-vscode/webview-ui/src/i18n/ar.ts
+++ b/packages/kilo-vscode/webview-ui/src/i18n/ar.ts
@@ -624,7 +624,7 @@ export const dict = {
   "ui.permission.toolLabel.grepSearch": "بحث Grep",
   "ui.permission.toolLabel.webSearch": "بحث ويب",
   "ui.permission.toolLabel.list": "قائمة",
-  "ui.permission.toolLabel.externalDirectory": "قراءة دليل خارجي",
+  "ui.permission.toolLabel.externalDirectory": "السماح بالوصول إلى مجلد خارجي",
   "ui.permission.toolLabel.webFetch": "جلب ويب",
   "ui.permission.toolLabel.task": "مهمة",
   "ui.permission.toolLabel.skill": "مهارة",
diff --git a/packages/kilo-vscode/webview-ui/src/i18n/br.ts b/packages/kilo-vscode/webview-ui/src/i18n/br.ts
index 01e443827e8..29df48572d1 100644
--- a/packages/kilo-vscode/webview-ui/src/i18n/br.ts
+++ b/packages/kilo-vscode/webview-ui/src/i18n/br.ts
@@ -633,7 +633,7 @@ export const dict = {
   "ui.permission.toolLabel.grepSearch": "Pesquisa Grep",
   "ui.permission.toolLabel.webSearch": "Pesquisa Web",
   "ui.permission.toolLabel.list": "Listar",
-  "ui.permission.toolLabel.externalDirectory": "Ler diretório externo",
+  "ui.permission.toolLabel.externalDirectory": "Permitir acesso ao diretório externo",
   "ui.permission.toolLabel.webFetch": "Busca Web",
   "ui.permission.toolLabel.task": "Tarefa",
   "ui.permission.toolLabel.skill": "Habilidade",
diff --git a/packages/kilo-vscode/webview-ui/src/i18n/bs.ts b/packages/kilo-vscode/webview-ui/src/i18n/bs.ts
index e78f804b3f5..7db1181bcb9 100644
--- a/packages/kilo-vscode/webview-ui/src/i18n/bs.ts
+++ b/packages/kilo-vscode/webview-ui/src/i18n/bs.ts
@@ -634,7 +634,7 @@ export const dict = {
   "ui.permission.toolLabel.grepSearch": "Grep pretraga",
   "ui.permission.toolLabel.webSearch": "Web pretraga",
   "ui.permission.toolLabel.list": "Izlistaj",
-  "ui.permission.toolLabel.externalDirectory": "Čitaj vanjski direktorij",
+  "ui.permission.toolLabel.externalDirectory": "Omogući pristup vanjskom direktoriju",
   "ui.permission.toolLabel.webFetch": "Web dohvat",
   "ui.permission.toolLabel.task": "Zadatak",
   "ui.permission.toolLabel.skill": "Vještina",
diff --git a/packages/kilo-vscode/webview-ui/src/i18n/da.ts b/packages/kilo-vscode/webview-ui/src/i18n/da.ts
index 58fee57921b..53fea86b36e 100644
--- a/packages/kilo-vscode/webview-ui/src/i18n/da.ts
+++ b/packages/kilo-vscode/webview-ui/src/i18n/da.ts
@@ -631,7 +631,7 @@ export const dict = {
   "ui.permission.toolLabel.grepSearch": "Grep-søgning",
   "ui.permission.toolLabel.webSearch": "Websøgning",
   "ui.permission.toolLabel.list": "Liste",
-  "ui.permission.toolLabel.externalDirectory": "Læs ekstern mappe",
+  "ui.permission.toolLabel.externalDirectory": "Giv adgang til ekstern mappe",
   "ui.permission.toolLabel.webFetch": "Webhentning",
   "ui.permission.toolLabel.task": "Opgave",
   "ui.permission.toolLabel.skill": "Færdighed",
diff --git a/packages/kilo-vscode/webview-ui/src/i18n/de.ts b/packages/kilo-vscode/webview-ui/src/i18n/de.ts
index 8520da7c444..3c35028c11a 100644
--- a/packages/kilo-vscode/webview-ui/src/i18n/de.ts
+++ b/packages/kilo-vscode/webview-ui/src/i18n/de.ts
@@ -643,7 +643,7 @@ export const dict = {
   "ui.permission.toolLabel.grepSearch": "Grep-Suche",
   "ui.permission.toolLabel.webSearch": "Websuche",
   "ui.permission.toolLabel.list": "Auflisten",
-  "ui.permission.toolLabel.externalDirectory": "Externes Verzeichnis lesen",
+  "ui.permission.toolLabel.externalDirectory": "Zugriff auf externen Ordner erlauben",
   "ui.permission.toolLabel.webFetch": "Web-Abruf",
   "ui.permission.toolLabel.task": "Aufgabe",
   "ui.permission.toolLabel.skill": "Fähigkeit",
diff --git a/packages/kilo-vscode/webview-ui/src/i18n/en.ts b/packages/kilo-vscode/webview-ui/src/i18n/en.ts
index f4b1a32e7b2..d3e2589e34f 100644
--- a/packages/kilo-vscode/webview-ui/src/i18n/en.ts
+++ b/packages/kilo-vscode/webview-ui/src/i18n/en.ts
@@ -630,7 +630,7 @@ export const dict = {
   "ui.permission.toolLabel.grepSearch": "Grep Search",
   "ui.permission.toolLabel.webSearch": "Web Search",
   "ui.permission.toolLabel.list": "List",
-  "ui.permission.toolLabel.externalDirectory": "Read External Directory",
+  "ui.permission.toolLabel.externalDirectory": "Access External Directory",
   "ui.permission.toolLabel.webFetch": "Web Fetch",
   "ui.permission.toolLabel.task": "Task",
   "ui.permission.toolLabel.skill": "Skill",
diff --git a/packages/kilo-vscode/webview-ui/src/i18n/es.ts b/packages/kilo-vscode/webview-ui/src/i18n/es.ts
index 3f2d57804d1..b793074ac21 100644
--- a/packages/kilo-vscode/webview-ui/src/i18n/es.ts
+++ b/packages/kilo-vscode/webview-ui/src/i18n/es.ts
@@ -637,7 +637,7 @@ export const dict = {
   "ui.permission.toolLabel.grepSearch": "Búsqueda Grep",
   "ui.permission.toolLabel.webSearch": "Búsqueda Web",
   "ui.permission.toolLabel.list": "Listar",
-  "ui.permission.toolLabel.externalDirectory": "Leer directorio externo",
+  "ui.permission.toolLabel.externalDirectory": "Acceder al directorio externo",
   "ui.permission.toolLabel.webFetch": "Obtener Web",
   "ui.permission.toolLabel.task": "Tarea",
   "ui.permission.toolLabel.skill": "Habilidad",
diff --git a/packages/kilo-vscode/webview-ui/src/i18n/fr.ts b/packages/kilo-vscode/webview-ui/src/i18n/fr.ts
index edf9fff62cd..f2a09f15196 100644
--- a/packages/kilo-vscode/webview-ui/src/i18n/fr.ts
+++ b/packages/kilo-vscode/webview-ui/src/i18n/fr.ts
@@ -641,7 +641,7 @@ export const dict = {
   "ui.permission.toolLabel.grepSearch": "Recherche Grep",
   "ui.permission.toolLabel.webSearch": "Recherche Web",
   "ui.permission.toolLabel.list": "Lister",
-  "ui.permission.toolLabel.externalDirectory": "Lire répertoire externe",
+  "ui.permission.toolLabel.externalDirectory": "Accéder au répertoire externe",
   "ui.permission.toolLabel.webFetch": "Récupération Web",
   "ui.permission.toolLabel.task": "Tâche",
   "ui.permission.toolLabel.skill": "Compétence",
diff --git a/packages/kilo-vscode/webview-ui/src/i18n/it.ts b/packages/kilo-vscode/webview-ui/src/i18n/it.ts
index 9718eaa2896..7b9416736ba 100644
--- a/packages/kilo-vscode/webview-ui/src/i18n/it.ts
+++ b/packages/kilo-vscode/webview-ui/src/i18n/it.ts
@@ -509,7 +509,7 @@ export const dict = {
   "ui.permission.toolLabel.grepSearch": "Ricerca grep",
   "ui.permission.toolLabel.webSearch": "Ricerca web",
   "ui.permission.toolLabel.list": "Elenco",
-  "ui.permission.toolLabel.externalDirectory": "Leggi directory esterna",
+  "ui.permission.toolLabel.externalDirectory": "Accedi alla directory esterna",
   "ui.permission.toolLabel.webFetch": "Recupero web",
   "ui.permission.toolLabel.task": "Task",
   "ui.permission.toolLabel.skill": "Skill",
diff --git a/packages/kilo-vscode/webview-ui/src/i18n/ja.ts b/packages/kilo-vscode/webview-ui/src/i18n/ja.ts
index 03998a12e6a..587c9545ca0 100644
--- a/packages/kilo-vscode/webview-ui/src/i18n/ja.ts
+++ b/packages/kilo-vscode/webview-ui/src/i18n/ja.ts
@@ -629,7 +629,7 @@ export const dict = {
   "ui.permission.toolLabel.grepSearch": "Grep検索",
   "ui.permission.toolLabel.webSearch": "Web検索",
   "ui.permission.toolLabel.list": "一覧",
-  "ui.permission.toolLabel.externalDirectory": "外部ディレクトリ読み取り",
+  "ui.permission.toolLabel.externalDirectory": "外部ディレクトリにアクセス",
   "ui.permission.toolLabel.webFetch": "Web取得",
   "ui.permission.toolLabel.task": "タスク",
   "ui.permission.toolLabel.skill": "スキル",
diff --git a/packages/kilo-vscode/webview-ui/src/i18n/ko.ts b/packages/kilo-vscode/webview-ui/src/i18n/ko.ts
index d8b7d757f35..e5ff95ab938 100644
--- a/packages/kilo-vscode/webview-ui/src/i18n/ko.ts
+++ b/packages/kilo-vscode/webview-ui/src/i18n/ko.ts
@@ -629,7 +629,7 @@ export const dict = {
   "ui.permission.toolLabel.grepSearch": "Grep 검색",
   "ui.permission.toolLabel.webSearch": "웹 검색",
   "ui.permission.toolLabel.list": "목록",
-  "ui.permission.toolLabel.externalDirectory": "외부 디렉토리 읽기",
+  "ui.permission.toolLabel.externalDirectory": "외부 디렉터리에 액세스",
   "ui.permission.toolLabel.webFetch": "웹 가져오기",
   "ui.permission.toolLabel.task": "작업",
   "ui.permission.toolLabel.skill": "스킬",
diff --git a/packages/kilo-vscode/webview-ui/src/i18n/nl.ts b/packages/kilo-vscode/webview-ui/src/i18n/nl.ts
index 28f72327f59..ba70a2fda33 100644
--- a/packages/kilo-vscode/webview-ui/src/i18n/nl.ts
+++ b/packages/kilo-vscode/webview-ui/src/i18n/nl.ts
@@ -636,7 +636,7 @@ export const dict = {
   "ui.permission.toolLabel.grepSearch": "Grep Zoeken",
   "ui.permission.toolLabel.webSearch": "Web Zoeken",
   "ui.permission.toolLabel.list": "Lijst",
-  "ui.permission.toolLabel.externalDirectory": "Externe map lezen",
+  "ui.permission.toolLabel.externalDirectory": "Externe map openen",
   "ui.permission.toolLabel.webFetch": "Web Ophalen",
   "ui.permission.toolLabel.task": "Taak",
   "ui.permission.toolLabel.skill": "Vaardigheid",
diff --git a/packages/kilo-vscode/webview-ui/src/i18n/no.ts b/packages/kilo-vscode/webview-ui/src/i18n/no.ts
index 3c4b19a9662..d144f062286 100644
--- a/packages/kilo-vscode/webview-ui/src/i18n/no.ts
+++ b/packages/kilo-vscode/webview-ui/src/i18n/no.ts
@@ -636,7 +636,7 @@ export const dict = {
   "ui.permission.toolLabel.grepSearch": "Grep-søk",
   "ui.permission.toolLabel.webSearch": "Websøk",
   "ui.permission.toolLabel.list": "Liste",
-  "ui.permission.toolLabel.externalDirectory": "Les ekstern mappe",
+  "ui.permission.toolLabel.externalDirectory": "Gi tilgang til ekstern mappe",
   "ui.permission.toolLabel.webFetch": "Webhenting",
   "ui.permission.toolLabel.task": "Oppgave",
   "ui.permission.toolLabel.skill": "Ferdighet",
diff --git a/packages/kilo-vscode/webview-ui/src/i18n/pl.ts b/packages/kilo-vscode/webview-ui/src/i18n/pl.ts
index 5287a2fa5d8..4d87da2d1e2 100644
--- a/packages/kilo-vscode/webview-ui/src/i18n/pl.ts
+++ b/packages/kilo-vscode/webview-ui/src/i18n/pl.ts
@@ -633,7 +633,7 @@ export const dict = {
   "ui.permission.toolLabel.grepSearch": "Wyszukiwanie Grep",
   "ui.permission.toolLabel.webSearch": "Wyszukiwanie Web",
   "ui.permission.toolLabel.list": "Wylistuj",
-  "ui.permission.toolLabel.externalDirectory": "Czytaj katalog zewnętrzny",
+  "ui.permission.toolLabel.externalDirectory": "Uzyskaj dostęp do katalogu zewnętrznego",
   "ui.permission.toolLabel.webFetch": "Pobieranie Web",
   "ui.permission.toolLabel.task": "Zadanie",
   "ui.permission.toolLabel.skill": "Umiejętność",
diff --git a/packages/kilo-vscode/webview-ui/src/i18n/ru.ts b/packages/kilo-vscode/webview-ui/src/i18n/ru.ts
index 6108d6f8cae..894964281f5 100644
--- a/packages/kilo-vscode/webview-ui/src/i18n/ru.ts
+++ b/packages/kilo-vscode/webview-ui/src/i18n/ru.ts
@@ -633,7 +633,7 @@ export const dict = {
   "ui.permission.toolLabel.grepSearch": "Grep-поиск",
   "ui.permission.toolLabel.webSearch": "Веб-поиск",
   "ui.permission.toolLabel.list": "Список",
-  "ui.permission.toolLabel.externalDirectory": "Чтение внешнего каталога",
+  "ui.permission.toolLabel.externalDirectory": "Открыть доступ к внешней папке",
   "ui.permission.toolLabel.webFetch": "Веб-загрузка",
   "ui.permission.toolLabel.task": "Задача",
   "ui.permission.toolLabel.skill": "Навык",
diff --git a/packages/kilo-vscode/webview-ui/src/i18n/th.ts b/packages/kilo-vscode/webview-ui/src/i18n/th.ts
index 009277c1e0a..bb935f88c3a 100644
--- a/packages/kilo-vscode/webview-ui/src/i18n/th.ts
+++ b/packages/kilo-vscode/webview-ui/src/i18n/th.ts
@@ -627,7 +627,7 @@ export const dict = {
   "ui.permission.toolLabel.grepSearch": "ค้นหา Grep",
   "ui.permission.toolLabel.webSearch": "ค้นหาเว็บ",
   "ui.permission.toolLabel.list": "รายการ",
-  "ui.permission.toolLabel.externalDirectory": "อ่านไดเรกทอรีภายนอก",
+  "ui.permission.toolLabel.externalDirectory": "อนุญาตให้เข้าถึงโฟลเดอร์ภายนอก",
   "ui.permission.toolLabel.webFetch": "ดึงข้อมูลเว็บ",
   "ui.permission.toolLabel.task": "งาน",
   "ui.permission.toolLabel.skill": "ทักษะ",
diff --git a/packages/kilo-vscode/webview-ui/src/i18n/tr.ts b/packages/kilo-vscode/webview-ui/src/i18n/tr.ts
index 54cdb46d64e..45a092912b8 100644
--- a/packages/kilo-vscode/webview-ui/src/i18n/tr.ts
+++ b/packages/kilo-vscode/webview-ui/src/i18n/tr.ts
@@ -633,7 +633,7 @@ export const dict = {
   "ui.permission.toolLabel.grepSearch": "Grep Araması",
   "ui.permission.toolLabel.webSearch": "Web Araması",
   "ui.permission.toolLabel.list": "Listele",
-  "ui.permission.toolLabel.externalDirectory": "Harici Dizin Oku",
+  "ui.permission.toolLabel.externalDirectory": "Harici Dizine Eriş",
   "ui.permission.toolLabel.webFetch": "Web Getir",
   "ui.permission.toolLabel.task": "Görev",
   "ui.permission.toolLabel.skill": "Beceri",
diff --git a/packages/kilo-vscode/webview-ui/src/i18n/uk.ts b/packages/kilo-vscode/webview-ui/src/i18n/uk.ts
index 13031510cde..abef4865d8c 100644
--- a/packages/kilo-vscode/webview-ui/src/i18n/uk.ts
+++ b/packages/kilo-vscode/webview-ui/src/i18n/uk.ts
@@ -635,7 +635,7 @@ export const dict = {
   "ui.permission.toolLabel.grepSearch": "Пошук Grep",
   "ui.permission.toolLabel.webSearch": "Веб-пошук",
   "ui.permission.toolLabel.list": "Список",
-  "ui.permission.toolLabel.externalDirectory": "Читати зовнішню директорію",
+  "ui.permission.toolLabel.externalDirectory": "Надати доступ до зовнішньої папки",
   "ui.permission.toolLabel.webFetch": "Веб-запит",
   "ui.permission.toolLabel.task": "Завдання",
   "ui.permission.toolLabel.skill": "Навичка",
diff --git a/packages/kilo-vscode/webview-ui/src/i18n/zh.ts b/packages/kilo-vscode/webview-ui/src/i18n/zh.ts
index 3db874afdd8..b60c28e7dbd 100644
--- a/packages/kilo-vscode/webview-ui/src/i18n/zh.ts
+++ b/packages/kilo-vscode/webview-ui/src/i18n/zh.ts
@@ -617,7 +617,7 @@ export const dict = {
   "ui.permission.toolLabel.grepSearch": "Grep搜索",
   "ui.permission.toolLabel.webSearch": "Web搜索",
   "ui.permission.toolLabel.list": "列出",
-  "ui.permission.toolLabel.externalDirectory": "读取外部目录",
+  "ui.permission.toolLabel.externalDirectory": "访问外部目录",
   "ui.permission.toolLabel.webFetch": "Web获取",
   "ui.permission.toolLabel.task": "任务",
   "ui.permission.toolLabel.skill": "技能",
diff --git a/packages/kilo-vscode/webview-ui/src/i18n/zht.ts b/packages/kilo-vscode/webview-ui/src/i18n/zht.ts
index 6ded553b135..d1aed8d2ded 100644
--- a/packages/kilo-vscode/webview-ui/src/i18n/zht.ts
+++ b/packages/kilo-vscode/webview-ui/src/i18n/zht.ts
@@ -616,7 +616,7 @@ export const dict = {
   "ui.permission.toolLabel.grepSearch": "Grep搜尋",
   "ui.permission.toolLabel.webSearch": "Web搜尋",
   "ui.permission.toolLabel.list": "列出",
-  "ui.permission.toolLabel.externalDirectory": "讀取外部目錄",
+  "ui.permission.toolLabel.externalDirectory": "存取外部目錄",
   "ui.permission.toolLabel.webFetch": "Web取得",
   "ui.permission.toolLabel.task": "任務",
   "ui.permission.toolLabel.skill": "技能",
diff --git a/packages/kilo-vscode/webview-ui/src/stories/settings.stories.tsx b/packages/kilo-vscode/webview-ui/src/stories/settings.stories.tsx
index 3f9bfb75925..1244b49af23 100644
--- a/packages/kilo-vscode/webview-ui/src/stories/settings.stories.tsx
+++ b/packages/kilo-vscode/webview-ui/src/stories/settings.stories.tsx
@@ -12,6 +12,7 @@ import Settings from "../components/settings/Settings"
 import ProvidersTab from "../components/settings/ProvidersTab"
 import ModelsTab from "../components/settings/ModelsTab"
 import AgentBehaviourTab from "../components/settings/AgentBehaviourTab"
+import AutoApproveTab from "../components/settings/AutoApproveTab"
 import ModeEditView from "../components/settings/ModeEditView"
 import McpEditView from "../components/settings/McpEditView"
 import type { AgentConfig, CommandConfig, Config } from "../types/messages"
@@ -51,6 +52,17 @@ export const SettingsPanel: Story = {
   ),
 }
 
+export const AutoApproveBashOnly: Story = {
+  name: "AutoApproveTab — Bash-only config defaults",
+  render: () => (
+    <StoryProviders config={{ permission: { bash: { "*": "ask", "git status *": "allow" } } } as any}>
+      <div style={{ "max-height": "700px", overflow: "auto" }}>
+        <AutoApproveTab />
+      </div>
+    </StoryProviders>
+  ),
+}
+
 export const SandboxingPanel: Story = {
   name: "Settings — sandboxing controls",
   render: () => (

From 30e45c7366d00190a8a02953a8110fcba43c7e05 Mon Sep 17 00:00:00 2001
From: "kilo-maintainer[bot]" <kilo-maintainer[bot]@users.noreply.github.com>
Date: Thu, 9 Jul 2026 15:49:19 +0000
Subject: [PATCH 2/2] chore: update kilo-vscode visual regression baselines

---
 .../composite-webview/bash-with-permission-chromium-linux.png | 4 ++--
 .../composite-webview/glob-with-permission-chromium-linux.png | 4 ++--
 .../permission-dock-bash-many-rules-chromium-linux.png        | 4 ++--
 .../permission-dock-external-dir-chromium-linux.png           | 4 ++--
 .../permission-dock-subagent-chromium-linux.png               | 4 ++--
 .../composite-webview/permission-dock-todo-chromium-linux.png | 4 ++--
 .../permission-dock-websearch-chromium-linux.png              | 4 ++--
 .../settings/auto-approve-bash-only-chromium-linux.png        | 3 +++
 8 files changed, 17 insertions(+), 14 deletions(-)
 create mode 100644 packages/kilo-docs/public/img/screenshot-tests/kilo-vscode/visual-regression/settings/auto-approve-bash-only-chromium-linux.png

diff --git a/packages/kilo-docs/public/img/screenshot-tests/kilo-vscode/visual-regression/composite-webview/bash-with-permission-chromium-linux.png b/packages/kilo-docs/public/img/screenshot-tests/kilo-vscode/visual-regression/composite-webview/bash-with-permission-chromium-linux.png
index ba354fdf8a3..fd4d53565ef 100644
--- a/packages/kilo-docs/public/img/screenshot-tests/kilo-vscode/visual-regression/composite-webview/bash-with-permission-chromium-linux.png
+++ b/packages/kilo-docs/public/img/screenshot-tests/kilo-vscode/visual-regression/composite-webview/bash-with-permission-chromium-linux.png
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:234454319a6d8ce9e513411c7eb94865053bd24b8ac6624b08151af6658ac7ac
-size 14909
+oid sha256:12f523463f86c86dffc350a32c0f76e39391f602c32f0b778d410c87cc83fb1a
+size 15708
diff --git a/packages/kilo-docs/public/img/screenshot-tests/kilo-vscode/visual-regression/composite-webview/glob-with-permission-chromium-linux.png b/packages/kilo-docs/public/img/screenshot-tests/kilo-vscode/visual-regression/composite-webview/glob-with-permission-chromium-linux.png
index ffc6b05851c..6be0770b52a 100644
--- a/packages/kilo-docs/public/img/screenshot-tests/kilo-vscode/visual-regression/composite-webview/glob-with-permission-chromium-linux.png
+++ b/packages/kilo-docs/public/img/screenshot-tests/kilo-vscode/visual-regression/composite-webview/glob-with-permission-chromium-linux.png
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:0a80f1cfd15e41bff690dda11e083b45dd0dba6936833bbb1292fd20e4e8e3a4
-size 15091
+oid sha256:58b145cc30b2d7580ea859dcd27b88535d33983d4125004586ba2568e3024252
+size 15889
diff --git a/packages/kilo-docs/public/img/screenshot-tests/kilo-vscode/visual-regression/composite-webview/permission-dock-bash-many-rules-chromium-linux.png b/packages/kilo-docs/public/img/screenshot-tests/kilo-vscode/visual-regression/composite-webview/permission-dock-bash-many-rules-chromium-linux.png
index c19ee28042d..b9cfee32b98 100644
--- a/packages/kilo-docs/public/img/screenshot-tests/kilo-vscode/visual-regression/composite-webview/permission-dock-bash-many-rules-chromium-linux.png
+++ b/packages/kilo-docs/public/img/screenshot-tests/kilo-vscode/visual-regression/composite-webview/permission-dock-bash-many-rules-chromium-linux.png
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:6f7e685eee7798085c2f68e3909b97c5cdef4610a5172ac29ec990e02d164e43
-size 17881
+oid sha256:d5a5fdd318bd14100e0c71f7f9055d830db1e59b6af57007608881f433a177ca
+size 18703
diff --git a/packages/kilo-docs/public/img/screenshot-tests/kilo-vscode/visual-regression/composite-webview/permission-dock-external-dir-chromium-linux.png b/packages/kilo-docs/public/img/screenshot-tests/kilo-vscode/visual-regression/composite-webview/permission-dock-external-dir-chromium-linux.png
index 72c72e77131..9e304fcc270 100644
--- a/packages/kilo-docs/public/img/screenshot-tests/kilo-vscode/visual-regression/composite-webview/permission-dock-external-dir-chromium-linux.png
+++ b/packages/kilo-docs/public/img/screenshot-tests/kilo-vscode/visual-regression/composite-webview/permission-dock-external-dir-chromium-linux.png
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:6f05d9512bbe3309c6d073fd8aca8e0800c7e2827bdefe6115e636e8a6e94070
-size 16239
+oid sha256:d544d3964f4a442b12d1eb47aa992c756ac537c2c810adb9abb072f99a815135
+size 17177
diff --git a/packages/kilo-docs/public/img/screenshot-tests/kilo-vscode/visual-regression/composite-webview/permission-dock-subagent-chromium-linux.png b/packages/kilo-docs/public/img/screenshot-tests/kilo-vscode/visual-regression/composite-webview/permission-dock-subagent-chromium-linux.png
index be6a5d5bff0..ee392e026bb 100644
--- a/packages/kilo-docs/public/img/screenshot-tests/kilo-vscode/visual-regression/composite-webview/permission-dock-subagent-chromium-linux.png
+++ b/packages/kilo-docs/public/img/screenshot-tests/kilo-vscode/visual-regression/composite-webview/permission-dock-subagent-chromium-linux.png
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:836d6b819a7108510a2abd5db6c9307945a7489c5a2b240035bfc1acb3405385
-size 13009
+oid sha256:10956634c051d1d1eff54229083434ddb1882adc49161d524a14ab3fc3859554
+size 13822
diff --git a/packages/kilo-docs/public/img/screenshot-tests/kilo-vscode/visual-regression/composite-webview/permission-dock-todo-chromium-linux.png b/packages/kilo-docs/public/img/screenshot-tests/kilo-vscode/visual-regression/composite-webview/permission-dock-todo-chromium-linux.png
index b4ad5e3c158..c4a677a6b78 100644
--- a/packages/kilo-docs/public/img/screenshot-tests/kilo-vscode/visual-regression/composite-webview/permission-dock-todo-chromium-linux.png
+++ b/packages/kilo-docs/public/img/screenshot-tests/kilo-vscode/visual-regression/composite-webview/permission-dock-todo-chromium-linux.png
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:19395088343e6546ae2f8d3232b8e1e17e5db482841dcf516a80c40fcbc8604a
-size 14912
+oid sha256:0249acab24874167ad0f6e88d12897be50dc12861e763a89a4d90545309de3b3
+size 15709
diff --git a/packages/kilo-docs/public/img/screenshot-tests/kilo-vscode/visual-regression/composite-webview/permission-dock-websearch-chromium-linux.png b/packages/kilo-docs/public/img/screenshot-tests/kilo-vscode/visual-regression/composite-webview/permission-dock-websearch-chromium-linux.png
index e01e50db549..36c34d09aab 100644
--- a/packages/kilo-docs/public/img/screenshot-tests/kilo-vscode/visual-regression/composite-webview/permission-dock-websearch-chromium-linux.png
+++ b/packages/kilo-docs/public/img/screenshot-tests/kilo-vscode/visual-regression/composite-webview/permission-dock-websearch-chromium-linux.png
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:45f622206510533051173fbab26f30c1359d25b9baff7d515c05b664b16d7aa4
-size 14734
+oid sha256:dc61e88dc65c15583e0c972f2d370e1c75c7a87949c557492ffbc146b2f75ac5
+size 15535
diff --git a/packages/kilo-docs/public/img/screenshot-tests/kilo-vscode/visual-regression/settings/auto-approve-bash-only-chromium-linux.png b/packages/kilo-docs/public/img/screenshot-tests/kilo-vscode/visual-regression/settings/auto-approve-bash-only-chromium-linux.png
new file mode 100644
index 00000000000..7e95d738d59
--- /dev/null
+++ b/packages/kilo-docs/public/img/screenshot-tests/kilo-vscode/visual-regression/settings/auto-approve-bash-only-chromium-linux.png
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:de86ff4ba9cc043a58527d8ffb77dccc9e6ae5c621d15b30fc8cfc3f2de366ab
+size 48316