Under the hoodTier: how much it should matter to you
1Useful: my rating, 1 to 5
1Signal: worth watching, 1 to 5
PermissionsArea: what it touches
Internal ChangesKind: in v2.1.265,
Internal ChangesSection of the release
What
A new wrapper runs the normal permission check and then, for flows like headless mode or the auto mode classifier, checks whether a tool looks like it was "denied before call" against a decision that hasn't already been settled. When that's triggered, Claude Code logs "<tool name> denied before call:" as a warning, discards the previously recorded decision for that tool, and converts it into the correct denial.
Why
This closes a gap where a tool could otherwise be called despite having effectively already been denied, making denial handling more consistent in headless and classifier-driven runs.
