Pending permission prompts can survive an SDK stream closing instead of vanishing.
Parked permission requests can be preserved through shutdown, behind two internal checks with no resolvable flag name.
What's wrong with this entry?
The control client can remember pending can_use_tool requests for a parked tool when the input stream closes, so they survive shutdown instead of being dropped.
- Preserved ids live in a preservedParkRequestIds set.
- While any are preserved the session is not flipped back to "running".
- Ids are cleared as responses arrive or when the park is retracted.
- Guarded by two internal predicates evaluated at shutdown time that could not be resolved to a flag name.
preservedParkRequestIds
Strings lifted out of the shipped bundle, so the claim above can be checked against them.