Answer a question the agent asked
Records what the person chose for one ask_user call and releases the tool call that has been blocked on it.
One answer per question, in the order the questions were asked. The indices are into the option list exactly as question-asked sent it — the engine ordered those options, so a client that reordered them would send back the wrong choice. Answering a question that is already answered, or one a host closed when its turn was interrupted, is a conflict: the tool it was blocking is no longer waiting.
A question is not a permission and this is not decidePermission: no rule can be written about a question, nothing is remembered, and the decision audit never carries one.
Autorizações
Enforced on every transport, with no exempt operation. A person's request must carry a JWT issued by the configured identity provider, which the host verifies itself against that issuer's key set: signature, issuer, expiry, and the person and organisation it names. Requests without a valid one receive 401 NRY-0011 — except a request with no token on a laptop's socket from the OS user the kernel names as the host's own, which is that machine's user.
Parâmetros de caminho
The question's id, as question-asked announced it.
Corpo
One person's answer to every question of one ask_user call, in the order the questions were asked — position is the join, because a question carries no id of its own.
One entry per question asked, in that order.
Resposta
Answered. The tool call that raised it is running again, and its close arrives as tool-call-finished for the call question-asked named.

