Under the hood
The permission-request handler destructures its fields; behavior is unchanged.
handlePermissionRequest now destructures tool_use_id and request_id from the request object instead of reading each property separately. This is a code-style change only; it still warns when either field is missing.