docs: update slash command and permission pattern docs for recent changes

docs/configuration/commands/index.md

@@ -26,7 +26,7 @@ Commands come in three shapes:
 > [!IMPORTANT]
 > **Behavior differs by frontend**
 >
-> `url` and `agent` are only fully honored in the **full TUI**, which checks `url` before `agent` (a URL command opens the browser and stops there; an agent-switching command switches before sending any instruction). The **lean TUI** doesn't special-case either field — it only resolves a command's expanded text and sends it as a chat message, so a URL-only command silently sends whatever trailing text followed the slash (often nothing, opening no browser) and an agent-switching command sends its instruction to the *current* agent instead of the target. The **CLI** (`docker agent run agent.yaml /command`) switches agents like the full TUI, but has no browser to open, so `url` has no effect there.
+> `url` and `agent` are only fully honored in the **full TUI**, which checks `url` before `agent` (a URL command opens the browser and stops there; an agent-switching command switches before sending any instruction). The **lean TUI** doesn't special-case either field — it only resolves a command's expanded text and sends it as a chat message, so a URL-only command silently sends whatever trailing text followed the slash (often nothing, opening no browser) and an agent-switching command sends its instruction to the *current* agent instead of the target. The **CLI** (`docker agent run agent.yaml /command`) switches agents like the full TUI, but has no browser to open, so `url` has no effect there. The **HTTP API** (`POST /api/sessions/:id/agent/:agent`) resolves agent-switching commands server-side: if the message content starts with a slash command whose `agent` field is set, the active agent is switched and the message is rewritten before the turn runs. Prompt-only and URL commands are not resolved server-side and pass through to the model unchanged.
 
 ## Prompt Commands
 

docs/configuration/permissions/index.md

@@ -130,6 +130,12 @@ permissions:
     - "write_file:path=/usr/*"
 ```
 
+> [!NOTE]
+> **Colons inside argument values are preserved.** Only the `:key=` token boundaries between
+> argument conditions split a pattern — colons that appear inside a value are treated as
+> ordinary characters and do not start a new condition. Check a tool’s actual argument names
+> (and whether they accept a string or a list) before writing an argument-matching pattern.
+
 ### Multiple Argument Conditions
 
 Chain multiple argument conditions with colons. All conditions must match: