Fetching from the wire…
01
02
03
04
05
06
07
08
Tools2026-09-19 · source-backed
Commits #45806 and #46066 stop a subagent or spawned thread from installing a plugin or raising an MCP consent prompt on its own, and #46042 adds read-only policy support to MCP tool requests so a thread can be handed a server it may query but not mutate through. GitHub compare If you fan out subagents against MCP servers, the read-only policy is the new lever.
Each link below shares sources, entities, or timing with this story.
The 60 commits between rust-v0.155.0-alpha.4 and alpha.6, published September 15 with an empty release body as every Codex alpha has, include configuring the Guardian prompt template (#45516), Guardian reviewers routed through ThreadManager for inline parents (#45518), reviewe...
A Chinese lab shipped a runtime that manages two American coding agents as subagents, and it went from repo creation to 145,439 stars in four days. deepseek-ai/deepseek-harness published dsh-v0.1.0-rc.7 at 12:01 UTC today, its first tagged release since the repo appeared on Au...
Rust, created May 14, at 2,643 stars (GitHub). Every run produces checkpoints linking a commit to the session that made it, including prompts, tool calls and reasoning. It runs Claude Code, Codex, its own agent and anything from the ACP registry side by side against one codeba...
It's the customer-run half of OpenAI's Secure MCP Tunnel, letting a private or localhost MCP server reach ChatGPT, Codex, the Responses API and Agent Builder without exposing it publicly. 422 stars, v0.0.14 tagged September 1, pushed this morning. GitHub Pre-1.0 numbering and...
A curated set of Codex plugin examples at 6,072 stars, where each plugin lives under plugins/<name>/ with a required .codex-plugin/plugin.json manifest and optional skills/, .app.json and .mcp.json companions. That effectively documents how Codex composes skills, apps and MCP...
PR #43428 advertises a codex/auth-change capability on stdio MCP connections with an auth manager, then sends notifications/codex/authChanged after initialization and on every subsequent auth change (GitHub). The payload carries credential and owner generation counters and no...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.