Under the hood
Useful2 Signal3
Permission denials now carry the tool call id, and a bridge session can honour host allow rules.
What's wrong with this entry?
Anonymous. No account, no email.
What
The deny, cancelled and default branches of the permission handler now forward the id of the tool call being decided. A bridge session also gains a flag to honour the host's allow rules, set only when the host transport is a session, plus a new entry point for placing calls.
Evidence
honourHostAllowRules: o.host.transport.kind === "session"
Strings lifted out of the shipped bundle, so the claim above can be checked against them.