Under the hood
Tool-approval payloads now include the caller instance id and model info.
The payload sent for tool-call approvals now carries instance_id, populated from a new callerInstanceId parameter, plus model info, alongside the existing permission_mode and is_bypass_available fields.