Skip to content

Agent AFK

v5.48.1 Bugfix

This release fixes issues for SREs watching stability and regressions.

Published 12d AI Agents & Assistants
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

afk agent-framework agents ai anthropic autonomous-agent
+14 more
claude claude-code cli coding-agent daemon harness-engineering llm mcp model-context-protocol openai self-improving subagent telegram-bot typescript

Affected surfaces

auth

ReleasePort's take

Moderate signal
editorial:auto 12d

The release gates project‑local .mcp.json spawning behind opt‑in consent and fixes a Telegram agent deadlock by detaching the polling loop.

Why it matters: Security: requires user consent (severity 90) before enabling .mcp.json spawns. Reliability: bugfix eliminates poller deadlocks during mid‑turn elicitations (severity 50).

Summary

AI summary

Fix prevents Telegram turns from deadlocking when eliciting mid‑turn.

Changes in this release

Security Critical

Gates project-local .mcp.json spawn behind opt-in consent.

Gates project-local .mcp.json spawn behind opt-in consent.

Source: llm_adapter@2026-07-14

Confidence: high

 —
Bugfix Medium

Runs Telegram agent turn detached to prevent poller deadlock on mid-turn elicitations.

Runs Telegram agent turn detached to prevent poller deadlock on mid-turn elicitations.

Source: llm_adapter@2026-07-14

Confidence: high

 —
Full changelog

What's Changed

  • test(mcp): cover teardown & error paths — scheduler spawn-failure, MCP disconnect, telegram fromConfig (#247) by @griffinwork40 in https://github.com/griffinwork40/agent-afk/pull/591
  • security(mcp): gate project-local .mcp.json spawn behind opt-in consent (#571) by @griffinwork40 in https://github.com/griffinwork40/agent-afk/pull/600
  • fix(telegram): run agent turn detached so mid-turn elicitations don't deadlock the poller by @griffinwork40 in https://github.com/griffinwork40/agent-afk/pull/602

Full Changelog: https://github.com/griffinwork40/agent-afk/compare/v5.48.0...v5.48.1

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track Agent AFK

Get notified when new releases ship.

Sign up free

About Agent AFK

Coding-agent harness built for unattended, away-from-keyboard runs across four surfaces sharing one session manager: one-shot CLI, REPL, cron-friendly headless daemon, and a Telegram bot. Editable agent loop (prompts, permission gates, model routing, explicit terminal states), MCP (stdio/HTTP/SSE + OAuth), lifecycle hooks, background subagents, plan mode, cross-session memory, and an append-only trace receipt (`afk trace show`). Works with Anthropic and any OpenAI-compatible endpoint (GPT, Codex, local MLX/llama.cpp/Ollama)

All releases →

Related context

Beta — feedback welcome: [email protected]