You'll notice Notable
Tool permission checks no longer short-circuit with a plan-mode refusal and instead continue through the ask rules.
The tool-permission-check function no longer includes the earlier mode === "plan" short-circuit refusal branch (the plan_mode code) that existed in the prior build. Refusal now proceeds through the request-size and ask-rule checks instead.