pub fn permissions_rules_ask_patterns(cap: &CapabilityConfig) -> Vec<String>Expand description
P5-1 (design §2 module 11, §3.1 capabilities.permissions.rules.ask):
the ask sibling of permissions_rules_patterns’s deny/allow —
kept as its own function (rather than folded into that one) since only
the P5-1 engine consults ask at all; Config::needs_approval (the
legacy gate) has no ask concept, so permissions_rules_patterns
staying deny/allow-only keeps its existing callers (including the CLI’s
build_config) untouched.