What
Denials are now reported in headless runs that have no prompt surface, not just when a prompt was shown.
Details
- emission was factored into a reusable
emitPermissionDenied - the no-transport path now emits it for non-allow decisions too
- the schema description was rewritten to state that with bare
-p, or SDKquery()withoutcanUseTool, 'ask' decisions are terminal and are also reported - the event is documented as best-effort advisory
Evidence
Best-effort advisory: in rare races a denial can book without a frame or a frame can lack a booking twin
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
Names in the bundle-pcanUseTool