You'll notice
Fixed a race where tool permissions could be checked against a mid-update MCP config.
When MCP server configs are added, removed, or reconciled, the session now calls suspendAllowsForApply before applying the change and reassertAfterApply afterward, avoiding a race where tool-use permissions could be evaluated against a config that's mid-update.