osfeed.dev
Release /

Desktop Commander MCP v0.3.0

Save a diagnostics ZIP to troubleshoot a Remote MCP connection even when sign-in is broken.

Before you upgrade to v0.3.0

8 to fix

Upgrade Node.js to 22.12.0 or newer before installing v0.3.0; the npm package no longer supports Node.js 18–21.

Action requiredConnect an MCP-compatible AI client to local file and terminal tools.Affects: Users installing or running the npm package on Node.js older than 22.12.0Inferred
Read the evidence

Getting-started prompt invitations are no longer appended to successful tool results.

Behavior changedOpen getting-started examples for local file and terminal workflows.Affects: New users receiving onboarding invitations in tool outputInferred
Read the evidence

Use whole numbers: `maxResults`, `contextLines` and `timeout_ms` must be nonnegative; pagination `offset` must be integral and `length` at least 1.

Action requiredSearch filenames and file contents with streamed, paginated results.Affects: Clients passing fractional or out-of-range search parametersInferred
Read the evidence

Pass a positive PID to `kill_process`; zero and negative PIDs are rejected to prevent process-group signals.

Action requiredList running processes and stop them by process ID.Affects: Clients passing zero or negative PIDs to `kill_process`Inferred
Read the evidence

Persistently damaged `config.json` is backed up and rewritten using readable settings, previously loaded settings when available, and defaults for the rest; check recovered restrictions.

Behavior changedSet allowed folders, blocked commands, the default shell, file limits and telemetry preferences.Affects: Users with corrupt configuration filesInferred
Read the evidence

Pass a finite number or numeric string for numeric settings; invalid numeric values now return an error. `null` clears a setting to its default.

Action requiredSet allowed folders, blocked commands, the default shell, file limits and telemetry preferences.Affects: Clients setting numeric configuration valuesInferred
Read the evidence

Use `outputPath` for output selection. PDF rendering ignores `dest`, `pdf_options.path`, `devtools`, custom browser executables/arguments and non-allowlisted launch options.

Action requiredRead PDF text and images, create PDFs from markdown, and insert or delete pages.Affects: Users setting PDF output or browser-launch overrides in options or markdown frontmatterInferred
Read the evidence

Pass existing, integral page indexes for PDF deletion; invalid indexes now fail the operation instead of being filtered out.

Action requiredRead PDF text and images, create PDFs from markdown, and insert or delete pages.Affects: Clients deleting nonexistent PDF pages or passing fractional indexesInferred
Read the evidence

What changed in v0.3.0

Adds `remote --report` and `--no-upload`, requires Node.js 22.12+, removes `get_prompts`, validates search parameters, and caps blocking process waits at 60 seconds. Image/PDF appends and unsafe PDF rendering overrides are rejected or ignored.

Also: Searches report incomplete coverage; file, spreadsheet, PDF and process operations handle previously failing cases.

Install @wonderwhy-er/[email protected] with Node.js 22.12.0+ and an MCP-compatible client.

New things you can do

Fixed and improved

An allowed directory reached through a symlink remains accessible, and writes through dangling links are checked against their actual destination.

Now worksSet allowed folders, blocked commands, the default shell, file limits and telemetry preferences.
Read the evidence

Seeded by @iluxav with Codex, from the release's public sources. Each change links to its evidence.

Share

LinkedIn takes the link and its card only; write your text there.

X LinkedIn Reddit Hacker News Bluesky