Fetching from the wire…
01
02
03
04
05
06
07
08
Tools2026-09-22 · source-backed
PR #47094, merged September 21, applies DescriptorPolicy::StdioOnly when launching local stdio MCP servers, so unrelated parent file descriptors stop propagating into the server and its descendants, with integration tests checking that inheritable pipes, sockets and files are absent across absolute, relative and shell-fallback launches. A companion commit masks daemon socket paths exposed through ancestor bind mounts. If you write an MCP server, don't assume inherited descriptors keep working as a side channel. (GitHub)
Each link below shares sources, entities, or timing with this story.
It's the customer-run half of OpenAI's Secure MCP Tunnel, letting a private or localhost MCP server reach ChatGPT, Codex, the Responses API and Agent Builder without exposing it publicly. 422 stars, v0.0.14 tagged September 1, pushed this morning. GitHub Pre-1.0 numbering and...
The 60 commits between rust-v0.155.0-alpha.4 and alpha.6, published September 15 with an empty release body as every Codex alpha has, include configuring the Guardian prompt template (#45516), Guardian reviewers routed through ThreadManager for inline parents (#45518), reviewe...
Commits #45806 and #46066 stop a subagent or spawned thread from installing a plugin or raising an MCP consent prompt on its own, and #46042 adds read-only policy support to MCP tool requests so a thread can be handed a server it may query but not mutate through. GitHub compar...
A standalone macOS and Windows desktop beta released September 14, moving the open-source agent out of the VS Code extension slot; the releases page shows Desktop v0.0.26 on September 11, v0.0.27 on September 13 and v0.0.28 on September 15, so it's shipping daily (GitHub). It...
A single Rust binary running MCP and HTTP servers over a local data directory, at 7,975 stars with about 217 added September 22. Agents write observations through lifecycle hooks that consolidate into ordinary markdown you can grep, edit in Obsidian and diff as commits, with r...
Roughly 245 commits, adding session forking, archive/restore from the TUI resume picker, full conversation export to Markdown or clipboard, and Amazon Bedrock Runtime as a built-in provider with AWS profile and region support. Hooks can now run commands asynchronously and invo...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.