This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Affected surfaces
Summary
AI summaryNew send_secret tool prompts operators for passwords without exposing them to AI.
Full changelog
What's New
send_secret — Password Input Without AI Exposure
A new send_secret tool that prompts the human operator for a password via a native GUI dialog. The secret is sent directly to the PTY session — the AI only sees {"success": true, "length": N}.
Platform support:
- macOS: osascript (native password dialog, no dependencies)
- WSL2:
powershell.exe Get-Credential(Windows GUI dialog, verified ✅) - Linux + display:
zenityorkdialog - Headless fallback:
/dev/tty
Other Changes
pty-mcp --versionandai-tmux --versionnow show the correct version- All platform builds inject version via ldflags
- Added community files: CONTRIBUTING, CODE_OF_CONDUCT, SECURITY, issue templates, PR template
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About raychao-oao/pty-mcp
Interactive PTY sessions for AI agents — local shells, SSH with persistent sessions (ai-tmux daemon for attach/detach), and serial ports. Single Go binary, no tmux dependency.
Related context
Beta — feedback welcome: [email protected]