Summary

The release adds workspace-scoped read auto-approvals, indexes empty directories for path completion and skips recursive worktree scans in submodules. It also makes benign tool errors and permission denials non-fatal in print mode and preserves malformed settings instead of discarding them.

Why it matters

These changes target the operational friction that makes coding agents brittle in real repositories: repeated permission prompts, slow scans and fatal handling of recoverable errors. They improve the predictability of CLI agents without expanding their authority globally.

Sources