Fetching from the wire…
Tools2026-08-27 · source-backed
PR #9499, merged August 23 and released in 0.22.2, is a breaking change moving the session-persistent REPL from three built-in packages/core tools into a new @qwen-code/node-repl-mcp package, opt-in through mcpServers (GitHub). It exposes node_repl, node_repl_reset and node_repl_add_node_module_dir over stdio; each call evaluates a fresh vm.SourceTextModule with prior bindings threaded in via an @prev SyntheticModule, so object identity, closures and declaration kinds survive between cells. The stated reason is architectural: packages/core stays byte-identical to main and the net diff is the new package plus two wiring lines. That's what a clean extraction looks like.
Each link below shares sources, entities, or timing with this story.
A spec is a press release until someone who didn't write it implements it. GitHub made Agent Plugins 1.0 generally available on August 12 across VS Code, Copilot CLI, the Copilot SDK, and the Copilot app on all plans. The spec, published August 6, was co-authored by AWS, Anysp...
3,364 stars since its August 17 creation. Every action against a computer, file, MCP server or UI component routes through a single gateway that resolves the target, decides it against policy, writes an audit row, then acts or refuses while naming the rule. Each bot gets its o...
promptfoo 0.122.2 (August 28) makes Codex's security analysis drivable as an evaluation target alongside ordinary model providers, plus a configurable Cloud auth header name. The same day's code-scan-action 0.2.0 hardens the action's supply chain, patches undici and guards bot...
PR #2626 merged into the spec repo on August 29, with 13 participants from Saxo Bank, Nordstrom, Boomi, Okta, Blue Shield of California, Silex Data Solutions, TraceForce, GNS-Foundation, EmpowerID, Solo.io and Archestra. Declared scope covers enterprise authentication, identit...
Waishnav/devspace (4,247 stars, v1.0.8 August 25) runs a local Node server exposing read, edit, search and shell execution over MCP, reached through a reverse proxy tunnel like Cloudflare or ngrok, with password-gated owner approval per client. The pitch is turning ChatGPT int...
The git-worktree fan-out tool for running Claude Code, Codex and Gemini in parallel shipped v3.42.0 with a breaking safety change: a plugin or wire client that asked wmux to drive a browser page without declaring its workspace used to get whichever page registered first, possi...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.