gabrielmaialva33/winx-code-agent

v0.2.330 Security

This release includes 2 security fixes for security teams reviewing exposed deployments.

Published 5d MCP Developer Tools

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

This release patches 2 known CVEs

Topics

autonomous code-agent computer control execution llm-agent

+8 more

llm-code mcp rust serena shell vibe-coding vibecoding wcgw

Affected surfaces

auth rbac

Summary

AI summary

Updates Deps, eca6071, and 03fb3ab across a mixed release.

Full changelog

Highlights

Suporte ao protocolo MCP 2025-11-25 (Tasks + Roots) e endurecimento de segurança do modo arquiteto.

Features

MCP 2025-11-25 Tasks protocol e bootstrap de workspace via Roots (eca6071)
Legacy discovery fallback — handshake 2025-11-25 continua funcionando com clientes mais novos (7105436)
CodeMap: expõe output schema para structured content (03fb3ab)

Fixes

CodeMap passa a usar a definição de output schema e remove formatos de schema integer não suportados (d643baa)
Isola shells de background por thread e drena filas do PTY nas chamadas de screen (13f6a9c)
Segurança: política read-only fail-closed para comandos de shell no modo arquiteto (596054f)
Segurança: redação do payload de comandos em trace logs e resumos de auditoria (e3b0b93)

Deps

rmcp → 1.8.0 + percent-encoding (12e2358)
Atualização de dependências no lockfile (687e9f7)

Docs

AGENTS.md com estrutura do projeto, comandos de desenvolvimento e guia de contribuição (4f7d3a8)

Full Changelog: https://github.com/gabrielmaialva33/winx-code-agent/compare/v0.2.329...v0.2.330

Security Fixes

Architect mode shell commands now enforce read‑only fail‑closed policy (596054f)
Redaction of command payload from trace logs and audit summaries (e3b0b93)

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track gabrielmaialva33/winx-code-agent

Get notified when new releases ship.

About gabrielmaialva33/winx-code-agent

A high-performance Rust reimplementation of WCGW for code agents, providing shell execution and advanced file management capabilities for LLMs via MCP.

All releases →