Fixed
- Preserve /allow-all during managed-settings refresh failures, and remember exact session approvals for missing paths without granting their parent directory; exact grants are visible in /list-dirs and cleared by /reset-allowed-tools
- Sandboxed network denials from proxy tunnel failures now show bypass guidance