Hook-checking agents can only use tools your permission mode allows

Some hooks (checks that run at set points, such as when Claude is about to stop) are evaluated by a separate helper agent that reads the conversation and decides whether a condition is met. That helper already had its tools filtered. It now also drops any tool that the session's current permission mode does not allow. A permission mode is the setting that decides how freely Claude Code may act without asking you.