Function should_protect 

pub fn should_protect(kind: ToolResultKind, content: &str) -> bool

Whether a tool_result with the given resolved kind and content must be preserved intact (never lossy-compressed) by the proxy.

File reads are always protected; unknown tools are protected only when the content heuristically looks like source code. Shell/search output is never protected here — it flows through the normal pattern compressors.