// Called only for native "asked" events. Explicit denials and host isolation
// still run before this point; the selected round mode answers pending requests.
export function canAutomaticallyApprove(mode: string, action: string, backgroundSandboxPermissions = false) {
  return mode === "always" || (backgroundSandboxPermissions && (action === "shell" || action === "edit"));
}