You'll noticeTier: how much it should matter to you
2Useful: my rating, 1 to 5
1Signal: worth watching, 1 to 5
PermissionsArea: what it touches
Bug FixesKind: in v2.1.275,
Bug FixesSection of the release
What
When a tool permission decision is set to "ask" and the check finds that it was localDisplayOnly — meaning the permission card was answered somewhere other than the active session — the tool call is now denied outright, with the message "a permission card answered away from the session," instead of continuing through the normal ask-or-hook approval flow.
Why
This closes a gap where a permission prompt answered in the wrong place could otherwise be treated as a valid approval, ensuring such cases are safely rejected.
