0.18.8-RC Security Update

🔒 Install this release candidate now. The control server behind maestro-cli, the browser interface and the phone link used to listen on your whole network from launch, even with Live off, and it answered requests from any web page. With its URL, someone on your Wi-Fi or a malicious site could run commands on your machine. The fix is the same one shipping to stable in v0.17.8.

📡 Nothing on your network can reach Maestro until you turn Live on. With Live off the server binds to 127.0.0.1 only, so maestro-cli keeps working and nothing else gets in. Turning Live on opens it to your LAN, and turning it off again closes it and rotates the token.

🛡️ Other websites cannot drive Maestro. Browser requests, WebSocket connections included, are refused unless they come from a page Maestro served itself. The token file maestro-cli reads is now readable by your user account only.

🙏 Thanks to CopperKoi and YoAm for finding and reporting this responsibly. Details are in advisory GHSA-q8p2-cpg2-fhpc.

This release candidate includes everything in stable v0.17.7 and v0.17.8, plus the changes below that have not reached stable yet.

Other Changes in 0.18.8

• 🧭 Codex replies become things you can act on. Suggested next steps turn into chips that send the prompt when clicked (Alt-click drops it in the composer to edit first), file references open the file, code comments show up as review cards, and git suggestions become cards that print the exact command before you run it.
• 👆 On an iPhone or iPad, tapping a tab switches to it and a long press opens its menu. A plain tap used to open the menu instead.
• 🖤 A window whose renderer is killed by a stray signal reloads by itself instead of sitting there black.
• 📊 The Tokens and Cost cards on the Usage Dashboard follow the time range you pick, rather than always showing lifetime totals.
• 💬 Send Feedback chooses from the accounts your agents already use instead of a list of providers, and an account that cannot run reports the failure in the chat rather than ending the conversation.

Full Changelog: v0.18.7-RC...v0.18.8-RC