Fetching from the wire…
Public story · 2026-09-18 · high
The same release locks down session storage, gateway pairing, and MCP tool permissions, per the changelog.
Why now: Goose released version 1.51.0 on September 17, 2026.
Goose cut planning mode from its CLI and removed the create-recipe command in version 1.51.0, per the release notes posted September 17. The notes list both moves under "improvements," not deprecations, which matters for anyone who built a workflow around either command. Desktop gets routed through the state-machine loop instead, via ACP prompt meta, but the CLI loses both features outright.
The security changes in the same release are more straightforward. Goose now restricts permissions on session storage, protects gateway pairing codes, and adds an operator allowlist for pairing. MCP app tools get bound to their extension owners, and image response bodies are now bounded. Each closes a specific gap rather than reworking a subsystem.
One fix stands out for being mundane in the right way. An auto-compact setting of 100% used to trigger compaction on every single run. Now it's treated as disabled, which is what most people typing 100% probably meant in the first place.
The release notes don't say how many CLI users relied on planning mode, or whether the state-machine loop covers the same ground the create-recipe command used to handle.
Each link below shares sources, entities, or timing with this story.
A standalone macOS and Windows desktop beta released September 14, moving the open-source agent out of the VS Code extension slot; the releases page shows Desktop v0.0.26 on September 11, v0.0.27 on September 13 and v0.0.28 on September 15, so it's shipping daily (GitHub). It...
Engrim (SQLite memory readable by four harnesses), Kit by Speakeasy (one binary speaking ACP v1/v2, A2A, MCP and Agent Skills), Yurei (MCP browser control for OpenCode, Cursor, Windsurf and Codex CLI) and Crew (agents messaging each other through ~/.crew hooks) all appeared be...
Released September 6 with 8 merged PRs. PR #3960 puts approval gates and workspace checkpoint/rollback into the graph runtime, so a long-running agent team pauses for a human decision and rewinds to a known workspace state. That pairs directly with the geometric-degradation fi...
Factory Droid joins over ACP, TRAE and Grok Build gain provider binding, and the deployment-provided connection expands across Claude Code, Codex, Kimi Code, Pi and Grok Build. Full-text search gains a provider-neutral layer with a durable outbox, resumable indexing and an opt...
Released September 2, this build fixes managed settings silently going unenforced when the managed-settings file, a drop-in, the MDM plist, or the HKLM value fails to parse. Claude Code now refuses to launch and names the source. It also fixes concurrent sessions silently reve...
388,449 stars. 106 releases in 230 days, then nothing, then this. OpenClaw tagged v2026.8.1 at 03:30 UTC on August 31, branding it 2.0 and treating it as the project's first real major version. The scale is the first thing you notice: more than 16,000 pull requests folded in,...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.