[tdody]

Follow-up to #40 (THI-422), found during the hand checks.

For some Bash commands (python3 -c …), Claude Code 2.1.280 adds a row under the description, This command requires approval, at indent 1. dialog_matches hashed it as part of the command block, so the digest never equalled the hook's key and every Allow on such a prompt answered 409. That failed safe, but those prompts couldn't be allowed.

The change. dialog_matches skips that exact row, and only that row, when it sits at the end of the block and shallower than the command (_TRAILING_CHROME):

• any other shallow row there still stays in the block, so unknown chrome fails closed;
• the same text at the command's indent is part of the request.

Tests:

• a new real capture, tests/fixtures/permission_dialogs/bash_requires_approval.txt, added to every list of real captures: parse, own key, no other key, the hook's own key, and parse_pane reading it as needs-input;
• negative cases: ⚠ Sandbox disabled in that position fails, and the known text at indent 3 is part of the command;
• a mutation check: with the skip disabled, 3 tests fail.

pytest 2030 · bin/check clean.

🤖 Generated with Claude Code

[tdody]

Replaced by #52: same change, with the branch on origin and the review's four fixes added.