[BUG] send_message (cross-session) offers only "Allow once" — no persistent grant, unlike other requiresUserInteraction tools

What's Wrong?

MCP tools with the requiresUserInteraction annotation are hard-blocked in Bypass Permissions
mode (see #58757, closed by stale-bot with no fix; #67615, still open). The documented workaround
is: switch to Manual/Ask mode, trigger the tool once, click "Always allow" -- this grants a
persistent approval that then works even back in Bypass mode.

This workaround does NOT work for mcp__ccd_session_mgmt__send_message (cross-session DM tool).
Its confirmation dialog offers ONLY "Allow once" -- no "Always allow" option exists. Every single
call requires a fresh manual click, permanently, with no way to grant a standing approval through
the UI.

Steps to Reproduce

1. Start Claude Code, switch to Manual (Ask) permissions mode.
2. Call mcp__ccd_session_mgmt__send_message to another session.
3. Observe the confirmation dialog: only "Allow once" is offered, no "Always allow".
4. Repeat the call -- the dialog reappears every time, with no way to persist consent.

Expected

Either: (a) send_message should offer "Always allow" like other requiresUserInteraction tools,
or (b) if a standing grant is intentionally disallowed for this specific tool (e.g. security reasons
around cross-session messaging), that should be documented/stated in the dialog, since it currently
looks identical in style to other confirm dialogs that DO support a persistent grant.

Related

• #58757 (Bypass mode blocks requiresUserInteraction tools -- closed, unresolved)
• #67615 (send_message dialog appears then still fails after Approve -- open)
• #47695 (accept doesn't persist, causes retry loop -- closed as duplicate)

Environment

• Windows 11, Claude Code desktop