What
When a subagent launch is auto-approved without a prompt, that approval is now single-use. A retried attempt that reuses the same approval fails with an error telling it nothing was created and to ask again.
Details
- a bounded cache of already-consumed approvals tracks tool-use IDs and evicts oldest entries past its cap
- the failure is reported as a
create_replayederror, so the retry goes back through the normal permission prompt - only relevant to launches that took the no-prompt path above
Evidence
this approval was already used by an earlier attempt — nothing was created now; retry so it is asked again
Strings lifted out of the shipped bundle, so the claim above can be checked against them.