Function resolve_before_tool_call_result 

pub async fn resolve_before_tool_call_result(
    hook_result: HookResult,
    secret_prompt: Option<&SecretPromptHandle>,
    auto_approve_confirms: bool,
    session_allow_all: Option<&SessionConfirmLatch>,
) -> HookResult

Resolve a before_tool_call result that may request user confirmation.

When auto_approve_confirms is true, or every source extension of the Confirm (same load generation) has been latched by an earlier “Allow all” answer, Confirm is short-circuited to approval. Headless / non-interactive callers with neither fail closed. “Allow all” is only offered (a ConfirmScope is attached) when this call site has a latch to arm; otherwise the dialog offers Allow / Deny only.