AskUserQuestion: clicking the VS Code window to focus it registers as an option selection

Environment: Claude Code 2.1.206, Windows 11 Pro (10.0.26200), VS Code extension UI.

What happened:
The model called AskUserQuestion with three options while the VS Code window was unfocused. The user clicked on the VS Code window purely to bring it into focus. That focus click landed inside the question UI and was immediately committed as a selection — the model received one of the options as the user's answer with no deliberate choice and no confirmation step.

Why this is severe:
AskUserQuestion is used precisely to gate consequential decisions (in this case, choosing between operational responses to a broken pipeline). A focus click silently produced false consent; the user had to notice and interrupt the running turn to prevent the model from acting on an option they never chose.

Expected behavior:

• A click that transfers window focus should not activate controls (standard focus-guard behavior), and/or
• option selection should require an explicit confirm action rather than committing on a single click.

Repro:

1. Trigger any AskUserQuestion prompt in the VS Code extension.
2. Unfocus the VS Code window.
3. Click once on the window in the area where the options render.
4. Observe the option is committed as the answer.