TAG
#plugins
Stories connected through a shared idea, actor, technology or theme.
Cline moves agent plugins into the hub processPlugins now load in the hub process by default, removing the requirement for a Node or Bun runtime on the user's PATH. Failed plugins remain visible through status commands and session diagnostics instead of silently losing their tools, while sandboxed subprocess loading remains available.→Claude Code 2.1.290 adds richer agent hooks and safer plugin controlsThe release adds tool-call and subagent identifiers to plugin hooks, introduces named-session attach and log commands, and expands managed-agent onboarding. It also fixes MCP attribution, symlink escapes, sandbox approvals, scheduled-task recovery and several remote-session failure modes.→Microsoft APM 0.29.1 hardens agent package managementAPM 0.29.1 adds support for catalog-only marketplace plugins and improves diagnostics for malformed executable trust configuration. It also fixes staging cleanup, plugin hooks during reinstall, private cache authentication, deterministic lockfiles and MCP dependency resolution.→Bifrost HTTP transport receives a new unauthenticated RCE disclosureThe CVE describes unauthenticated plugin-path submission through POST /api/plugins when management authentication is disabled, allowing native code execution on affected dynamically linked builds. The published static Docker image is expected to be limited to SSRF, but operators should still upgrade or enable management authentication.→Codex CLI 0.153 adds plugin marketplaces and resumable agent sessionsCodex CLI 0.153.0 adds commands to list, install and remove plugins from remote marketplaces, along with experimental context management and new app-server thread metadata. It also improves recovery after app-server disconnects, preserves Guardian and MCP approval state across compaction, restarts and forks, and adds a fuller TUI history view.→Javy 6.0 changes its plugin API for JavaScript-to-WebAssembly buildsJavy 6.0 removes eval_bytecode from the default plugin and update namespace, moves plugin validation into code generation and changes the configuration schema API. It also adds a code-generation option for including source and documents a WASI Preview 2 plugin direction.→DeepSeek open-sources a plugin-oriented agent harnessThe DeepSeek Harness is built on the Cordis framework and provides components for context handling, tool use, orchestration, state, permissions, and error management. It also supports append-only session logs that can be inspected, forked, searched, and replayed.→DeepSeek releases a plugin-oriented agent harnessDeepSeek Harness treats models, tools, skills, sessions, sandboxes, filesystems, loops, orchestration and the user interface as plugins powered by the Cordis framework. The project is available through npm or source, but its README warns that compatibility-breaking changes are expected during the developer preview.→