A new follow_a_plan permission mode has been added for MCP server interactions. The available permission modes are now ask, skip_all_permission_checks, and follow_a_plan. When the permission mode is set, a confirmation message "Permission mode set to: [mode]" is returned. This mode appears to be used during plan execution to provide an intermediate permission level between full ask and full bypass.
Evidence
Permission mode handler (search for "follow_a_plan" or "Permission mode set to:")
Strings lifted out of the shipped bundle, so the claim above can be checked against them.