The tool-permission-check function no longer includes the earlier mode === "plan" short-circuit refusal branch (the plan_mode code) that existed in the prior build. Refusal now proceeds through the request-size and ask-rule checks instead.
Removed plan-mode refusal check from tool permission path
Tool permission checks no longer short-circuit with a plan-mode refusal and instead continue through the ask rules.
You'll noticeTier: how much it should matter to you
3Useful: my rating, 1 to 5
4Signal: worth watching, 1 to 5
PermissionsArea: what it touches
RemovedKind: in v2.1.257,
What probably matters to youSection of the release