Summary

The release lets users restrict GitHub authentication to approved MCP origins and grant path access for individual sessions. Permission prompts remain actionable after resuming sessions, while compaction now returns a summary even when instructions request terse output.

Why it matters

The update combines a new model option with practical controls for making terminal agents safer and more recoverable.

Sources