Fetching from the wire…
01
02
03
04
05
06
07
08
Tools2026-09-21 · source-backed
v0.24.2 on September 20 adds per-file attribution with token cost, conditional extension rules, capped context warnings, and /context category rows partitioned to sum to the provider-reported total. Also an internal bwrap-based Linux sandbox foundation with structured process launching and confined workers. Auditing a bloated agent context gets a per-file line naming which extension dragged it in, instead of one aggregate number you can't act on.
Each link below shares sources, entities, or timing with this story.
Cursor put Projects into beta on September 10. At its center is a coordinator agent with one unusual rule: it never writes code. It plans, starts implementing subagents that run in parallel, and brings their finished work back to you for review. The coordinator runs on a dedic...
The trick is one line in a file you never read. Manifold Security published eight findings across seven coding agents (Claude Code, Codex, Cursor, Grok Build, Qwen Code, goose, Hermes Agent) that all reduce to the same mechanism. A repository's own .git/config sets core.fsmoni...
PR #10945 in v0.23.1-preview.0. Any agent CLI bridging into a chat platform holds a long-lived credential, and connect-time debug logging is where it leaks first, into log files and collectors that have a much wider read audience than the config it came from. Grep your own con...
A spec is a press release until someone who didn't write it implements it. GitHub made Agent Plugins 1.0 generally available on August 12 across VS Code, Copilot CLI, the Copilot SDK, and the Copilot app on all plans. The spec, published August 6, was co-authored by AWS, Anysp...
v1.9.0, released September 8, adds --allow-unrestricted-paths, configurable filesystem roots, an option to disable the JS execution tools, and extends --no-javascript-evaluation to cover navigations and initScripts. It also raises the default trace buffer to 1.2GB to match Dev...
qwen-code 0.22.2 moved dynamic workflows behind a documented tools.workflowsEnabled setting replacing an undocumented environment variable, added an approval dialog showing the script's name, phases and arguments before execution, and refuses a workflow script before it can sp...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.