You'll notice
Answering a permission prompt from outside the session now counts as a denial
What
When a tool permission decision is set to "ask" and the check finds that it was localDisplayOnly — meaning the permission card was answered somewhere other than the active session — the tool call is now denied outright, with the message "a permission card answered away from the session," instead of continuing through the normal ask-or-hook approval flow.
Why
This closes a gap where a permission prompt answered in the wrong place could otherwise be treated as a valid approval, ensuring such cases are safely rejected.