- Usage-limit reset credit details. The CLI now surfaces the detail behind usage-limit reset credits.
- "writes" app-approval mode. App approvals gain a new mode named "writes".
- MCP interactive auth without the experimental opt-in. Interactive authentication for MCP servers no longer requires an experimental flag.
- Runtime app-server authentication. App-server authentication now happens at runtime.
Desk read: three of the four items are approvals or authentication plumbing — a permissions release rather than a feature drop.