Fetching from the wire…
01
02
03
04
05
06
07
08
Tools2026-09-21 · source-backed
PR #46877 removes the root-only elicitation guard and the allow_user_interaction plumbing, so child threads can surface browser sign-in, form input and interactive tool approval prompts and wait for a response under the existing approval policy. Legacy tool approvals through request_user_input stay root-only. The split is now: MCP elicitation delegable, legacy approvals not. Same week, PR #46844 makes temporary structured threads start read-only regardless of the managed permission profile, because a managed :workspace default was preventing those threads from starting at all.
Each link below shares sources, entities, or timing with this story.
Block released it August 27 with a security section dominated by defaults that previously failed open: fail closed on malformed tool visibility, permission denies now take precedence, fail closed on invalid default GCP credentials and invalid Codex ACP mode, honor plugin enabl...
Two merged PRs, five hours apart, and together they change what agent tool approval means on macOS. PR #43624, merged at 00:15Z on September 8, implements macOS user verification using P-256 keys in the Secure Enclave, stored in the Data Protection Keychain, with biometric aut...
OpenAI Devs announced on August 26 that WebMCP works in the ChatGPT desktop app's built-in browser and in ChatGPT Sites, so ChatGPT and Codex can call a site's declared tools directly. WebMCP is an experimental web standard adding navigator.modelContext to the browser, letting...
upstash/context7 (60,590 stars) shipped @upstash/[redacted] on August 7 on the 2026-07-28 protocol revision. HTTP serving is now stateless for both modern and legacy clients, and Redis-backed sessions are gone, which is a real operational simplification for anyone self-hosting...
Anthropic invented a file convention. It's now shipping GA inside a competitor's product. Nobody wrote a spec, nobody held a standards meeting, it just happened. On July 29, GitHub made agent skills and MCP server support generally available in Copilot code review for all Pro,...
Every browser-automation setup I've built in the past year has the same shape. A Playwright process. An MCP wrapper around it. A headless Chromium that drifts from the browser I actually use, with a different cookie jar, a different rendering path, and a login session I have t...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.