Function cursor_side_answer 

pub fn cursor_side_answer(
    input: &str,
    event: Option<&str>,
) -> Option<(String, i32)>

beforeMCPExecution and beforeReadFile are judged on preToolUse. They still answer, so a hooks file a person marked failClosed by hand is not refused for silence. The answer is allow, with a user rule’s warning when one matches, and exits 0. None for every other call.

This does not wait for a slot and does not search the pack for a sitting. On the direct path run_command has already loaded the seat env file. A promoted rule, one with from and lesson_hash, still asks the pack once and waits up to 400 ms.