Inside a tool_call hook: in a conversation the turn waits, saved, and
goes on when someone answers (approve()); on a stream, .each is given
the approval event and may answer it with approve() or deny(), and
an interactive session is asked at the console otherwise; a plain call
refuses (approval-required). decide answers in place of a person.