Archive

2026-07-16

The agent's hands finally left the browser. Computer use lands on everything that never got an API: real phones and TVs (agent-device), native desktop apps via the accessibility tree (pi-computer-use), legacy enterprise software in metered VMs (Coasty), the inbox (Nitrosend), and the literature rebuilt at agent speed (Cito) — with Grepathy as the accountability counterweight: commit the why before the transcript expires.

6 picks

2026-07-15

The coding agent session stopped being a private conversation today

5 picks

2026-07-14

Cloudflare would now like to verify a human is actually at the keyboard. The web is getting better at detecting when the human is absent, while builders engineer the moments the human is genuinely present: the human half of the agent loop is getting real interfaces (review-legible language, editable Word output, shared spreadsheet substrate, skills via Dropbox, zero-cost suspend-for-human).

5 picks

2026-07-13

It took a packet sniffer to find out what your coding agent actually sends. The day's two loudest technical posts are wire-level teardowns: systima spliced a logging proxy between harness and model and found Claude Code ships roughly 33,000 tokens — a 6,500-token system prompt, 24,000 tokens of tool schemas, 2,000 of injected reminders — before it reads your prompt (603 points), and a second post ran the same autopsy on xAI's Grok CLI (478 points). Both drop as writeups per the usual rule, but together they name the mood: the harness is now the black box, and users are reduced to sniffing its traffic to learn what it does on their behalf. Today's picks are the countermovement — every soft part of the agent hardening into a file you can read. The 07-08 edition did things with the agent's trail; today is about the form itself. A learned procedure becomes a typed program (Skillscript), a hard-won discovery becomes a fingerprinted cache entry that deletes itself when the code moves (capn-hook), the whole agent — persona, skills, permission ceiling — becomes a portable artifact you can inspect before running (Zotfile Agents), and the finished session becomes a shape you can watch (Mindwalk, the replay tool this newsletter has been watching for since 07-08). aftr carries Friday's second-interface story into After Effects. Dropped as news, teardown, or drama: both wire analyses, the Zed-vs-Anthropic spat, GhostLock, and the GPT-5.6 migration case study. Ant, Osaurus, and claude-code-proxy are in the footer.

5 picks

2026-07-10

Software is growing a second interface, and it isn't the one you click. Two frontier labs shipped new brains today — GPT-5.6 (1,312 points) and Meta's Muse Spark 1.1 — and both drop as model launches per the usual rule, because the more durable story was one rung down: tool after tool shipping a machine-legible surface alongside the human one. Yesterday's edition asked which model should get the call; today's is about what the call can touch. Microsoft's Flint — footered here yesterday, top of Show HN today at 342 points — is the pattern in miniature: don't make the agent draw the chart, give it a language that compiles to one. FableCut does the same for video (the project file is the interface), Frigade does it to your own web app (its API traffic becomes an auto-generated MCP server), Context.dev does it to everyone else's websites (pages in, JSON schemas out). And once everything is callable, every call needs a bouncer: Kastra is the runtime policy engine for agent tool calls this newsletter has been watching for since deptrust's install-time hook on 07-03. Dropped as news, launches, or off-vertical: GPT-5.6, Muse Spark 1.1, the EU Chat Control vote, the 1,007-point word game, and the one-person train sim. Colibrì — the local-model wave's first real installable, and the pool's biggest product — is in the footer with an explanation.

5 picks

2026-07-09

Two frontier models launched today, and the menu got bigger and pricier — not simpler. GPT-Live and Grok 4.5 both shipped, and the eval crowd spent the day arguing about measurement (OpenAI's "separating signal from noise in coding evals," Databricks benchmarking agents on a multi-million-line codebase). The more practical question for anyone paying the bill is which call needs the frontier at all. Today's two picks answer it without asking you to route your traffic through a new company: Frugon reads your logs and shows where the bill leaks; Foreman is a gateway you run yourself that sends each call to the cheapest model that can handle it. Both are pointedly honest about savings — Foreman refuses to quote a number, Frugon flags its own estimate as unverified until you measure — which is exactly the tell that separates them from the hosted proxies in the footer. Dropped as news or launches: GPT-Live, Grok 4.5, TypeScript 7, the Bun-in-Rust rewrite, both eval essays. The hosted trading desks (Auriko, Opper, Gate) and Microsoft's Flint are down below.

2 picks

2026-07-08

The agent's trail is finally being treated as an asset. Yesterday the pool onboarded the agent like an employee; today's tools all do something with the exhaust it produces — the rollouts, the tool calls, the long-running session, the finished document — instead of throwing it away. SkillOpt (Microsoft) distills scored rollouts into a reusable skill, keeping only edits that beat a held-out set. Halo seals every action into a hash-chained record anyone can verify. Context Warp Drive folds a session's past turns into a cache-hot prefix so the run can keep going for cheap. And docx-cli hands the finished Word doc back for human review — comments, tracked changes, the works. The why-now is on the front page: GitLost (213 points) is a writeup of how GitHub's own AI agent got tricked into leaking private repos — proof you can't take an agent's behavior on faith, which is exactly why its trail has to be trustworthy, improvable, and legible. Dropped as news, exploit, or model launch: GitLost itself, the Tenda firmware backdoor, Kokoro and pocket-tts (TTS releases). Shellular and MadsLorentzen's ai-job-search are in the footer — real, but off the thread.

4 picks

2026-07-07

The agent is being onboarded like an employee. The weekend's most-read piece was the GLM 5.2 margin-collapse essay (452 points) — inference is now a business with real unit economics, and when margins compress, somebody has to do the accounting. Today's pool answers like a back office running new-hire orientation: the agent gets an office suite it can actually drive (OfficeCLI), a role with deny-by-default permissions and no self-approval (MakerChecker), a scoped key with a spending limit checked before the request runs (Otari, from Mozilla AI), a timesheet that names which job is burning which GPU (l9gpu), and — for the one-on-one — a live window into what it's thinking before it types (Subtext). Dropped as news or research: the margin essay itself, Anthropic's global-workspace interpretability paper (383 points — though Subtext below is its run-it-at-home echo), and the LongCat-2.0 model launch. Pulpie, Ternlight, and the Tom Riddle diary are in the footer — real, but off the thread.

5 picks

2026-07-06

The agent runs while you're elsewhere — today's tools are for the elsewhere

5 picks

2026-07-03

Your agent starts every session blind — today's tools hand it a map

5 picks

2026-07-02

The agent is getting hands — and each one ships with an approval gate. Today's picks all point the agent at channels where mistakes don't roll back — your Mac's mail and calendar (Macuse), a team's outbound email (Banger Mail), physical post (PieterPost) — and all three ship the same design: the agent does everything except the last click, which stays yours. Banger Mail names the pattern outright: a pull request for email. Code review escaped the repo this week. The why-now is the day's biggest infrastructure story, which you can't install yet: Cloudflare's Monetization Gateway (waitlist) lets any site charge AI agents per request over x402 stablecoin rails — the internet's biggest middleman pouring a tollbooth for software that spends money on its own. When agents act and pay like users, every irreversible verb grows a gate; Retrace rounds out the slate as the flight recorder for what happened between the gates. Dropped as news, benchmark, or off-thread: ZCode (z.ai's proprietary $16–144/month desktop IDE for GLM-5.2 — a model vendor shipping its own harness), Kimi K2.7 landing in Copilot, CursorBench 3.1 and Senior SWE-Bench, and the re-trending 61k-star OpenCut. OpenAI's Codex-in-Claude-Code plugin is in the footer.

4 picks

2026-07-01

The coding agent is turning into a package manager — for expertise, not code. We watched the SKILL.md format get hardened (skills-security, 06-11) and then standardized across every vendor (06-19); this is the next beat. Now that the socket is settled, a supply is filling it: today's three trending launches all ship prebuilt know-how you `skills add` into your agent — a book's contents (book-to-skill), a structured way to decide (council-of-high-intelligence), and Google's own agent-building playbook (agents-cli). The backdrop is the day's two loudest stories, both about the model as a box you can't see into: the #1 post claims Claude Code steganographically marks its own output (2,088 pts), and Godot said it won't take AI-authored contributions because it "can't trust heavy users of AI to understand their code." A skill is the opposite property — expertise you chose, can read, and can diff. We set aside the model and news flood (Sonnet 5, Fable 5 export controls, Claude Science, Leanstral) and the established scrapers re-trending (maxun at 16k, botasaurus at 5k). agentOS is in the footer: it's where the agent runs, not what you load into it.

3 picks

2026-06-30

The multi-agent control plane: tools to operate a fleet of coding agents rather than one — multiplex them in a terminal (herdr), point many at one deep task (DoorDash agentic-orchestrator), give them shared cross-tool memory (Reference MCP), and govern what they push to production (VibeRaven).

4 picks

2026-06-26

Open source finally came for three paid tools — and sent a different bill. While the front page argued over a "we depend on open source, we'll defend it" letter and an essay on how the papers-please era will gut your privacy, three projects shipped self-hostable replacements for SaaS builders rent every month: an SEO suite (open-seo) against Semrush and Ahrefs, an AI wiki (OpenKnowledge) against Notion and Obsidian, and a document parser (ParseHawk) against AWS Textract. The catch worth naming up front: none of them are free in the way "open source" implies. Ownership doesn't delete the bill — it moves it to a metered data API, your own model keys, or a GPU you have to buy. We set aside the week's other open-source drops that don't fit the thread (Nub, promptctl) — they're in the footer.

3 picks

2026-06-25

This week the agent moved into the browser. Google shipped computer use in Gemini 3.5 Flash — the mainstream bet, where a cloud model drives a remote machine by looking at screenshots. Four launches make the opposite wager: the agent belongs in *your* browser, reading the DOM instead of pixels, using the tabs you're already logged into and the keys you already hold, with nothing leaving your machine. page-agent drops a script tag into your own app so an agent can drive its UI; peerd runs the entire agent loop — sandboxes and all — as a browser extension; BrowserAct lends the agent your real logged-in Chrome to act on sites that fight back; BrowserBash points it at a local browser to write your tests. We set aside the strong off-theme launches (RubyLLM's unified Ruby client, the Nub toolkit), the model-and-lawsuit news (GLM-5.2, Anthropic v. Alibaba), and MinerU, which is two years old and trending on a release, not a debut.

4 picks

2026-06-23

The dev stack is being re-poured for a user that never sleeps. Five tools shipped this week that each assume an agent — not a person — is the one driving: version control without clones (Oak), a workspace where agents are in the room (Buzz), a place to run their code (CubeSandbox), a memory that survives the session (PMB), and a way to keep ten MCP servers from eating the context window (Conduit). The common move is to stop treating the agent as a guest on tooling built for humans and rebuild the substrate around it. We dropped the model launches (GLM-5.2, VibeThinker, OpenAI's Cyber), the perma-trending repos (Turso, Scrapy), and the Claude Code "best practice" repo that's a cheatsheet, not a product.

5 picks

2026-06-19

The model isn't the moat anymore; the edge is what you load into it. The coding agents converged this week — kilocode crossed 22k stars, and the Agent Skills format (a plain SKILL.md folder, released by Anthropic as an open standard) now loads in Cursor, Copilot, Codex, Gemini CLI, Goose, and Claude Code alike. When every agent reads the same skills, the differentiation moves up a layer: which skills you install, and what context you feed. Today is five bets on that layer — a catalog OpenAI made official, a 43-skill brain you install by telling your agent to, 500-odd skills that make a coding agent a video studio, a local engine that now serves skills off your own box, and the contrarian one that wins by handing the agent less.

5 picks

2026-06-18

Your agent stopped suggesting code and started running it. Today's launches are all fence, no engine. The shift that makes them matter is "code mode" — agents like VLM Run's Orion 2 now write a whole program and execute it end to end instead of asking permission one tool call at a time. The unit of risk used to be a function call you could approve; now it's a script that already ran, plus whatever it installed and whatever it read on the way. So the interesting work this week isn't a smarter agent — it's the perimeter around a dumb one you can't fully trust: a box to run it in, a leash on what it installs, a blindfold over what it sees. (There's even a benchmark now, islo-labs' RewardHackBench, for measuring whether the box actually holds when the agent tries to cheat its way out.)

4 picks

2026-06-17

Editor's note: You stopped writing the code; now the job is supervising whatever did. HN's top post all day was "Running local models is good now" (1,359 points) — last week's local-coding wave arriving as a fact of life: more code, generated faster and cheaper, by something that never re-reads its own diffs. Two of today's Show HNs are, independently, "code review that runs the code." The slate underneath is the supervision stack that gap demands — understand what's there, review it before it lands, run it to prove it works, watch the agents once they're live, and gate what they're allowed to touch. Dropped: the model launches (Microsoft's Fara-7B, GLM-5.2, Qwen-Robot), the $60B SpaceX-buys-Cursor headline, one more Claude Code fork (openclaude, 29k stars and still a fork), and Agent-Reach — giving an agent free run of the whole internet is the opposite of today's instinct, however many stars it's pulling.

5 picks

2026-06-16

Editor's note: The server in the middle had a bad week. HN's third-ranked post all day was someone asking whether anyone has actually replaced Claude with a local model for daily coding — 1,033 points, 454 mostly-it-depends answers — sitting right above a homelab AI dev-platform writeup. The products trending underneath answered the same instinct at every layer of the stack. Iroh shipped 1.0 of a network where the relay is optional. Kage takes a whole website with you as one offline binary. Macro is the team workspace as an AGPL repo you host yourself. Revi is dictation that never leaves the laptop. The kicker reclaims the disk your AI tools ate. Dropped: machine0 (renting someone else's VMs is the opposite move, however good the NixOS support), Peek (a genuinely novel database canvas, but seven stars and the peer-to-peer claim I wanted to cite wasn't in the repo), and the whole Fable-5-is-down news cycle, now sprouting its own watch-page cottage industry.

5 picks

2026-06-12

The ground floor of the dev stack got re-poured this week

6 picks

2026-06-11

Agent skills become a supply chain: a registry, a breakout package, a security scanner, governance — and the ops desk for the agents consuming them

6 picks

2026-06-09

The slop backlash arrives as tooling: de-generic your UI, your diffs, and yourself

6 picks

2026-05-24

The diff stops being the unit of work: as one developer runs a fleet of agents, the useful tooling moves off the editor onto running them (cmux), routing between them (plano), reviewing intent instead of lines (mainline), and carrying context across them (coremem) — and Anthropic spreads the same agent pattern past code into all knowledge work.

5 picks

2026-05-15

Agents went ambient this week, so the useful work is the discipline layer

5 picks

2026-05-14

Anthropic professionalizes both ends, the community ships escape hatches

5 picks

2026-05-12

The defensive aftermarket for agent-coded software

5 picks

2026-05-11

Local-first AI gets credible

6 picks

2026-05-10

Editor's note: The platforms start shipping their canonical answers to the agent stack. Yesterday's slate was community-built layers — VCS, sandbox, memory, audit, catch. Today: Anthropic releases its official Skills repo, Microsoft drops an eval CLI, Google expands Gemini's RAG to multimodal, Nous puts out a self-improving agent runtime. Plus two community kitchen-sinks that show what "production agent stack" is starting to mean in practice.

6 picks

2026-05-09

Editor's note: The supply chain around AI coding agents is filling out one layer at a time. Today's slate covers six rungs of that stack — what to build (spec), who builds it (provider switch), where it runs (sandbox), what it remembers (memory), what it did (audit), and what got broken (lint). The pre-AI dev pipeline (linter, type checker, test runner, CI, code review) took twenty years to mature. The post-AI version is being built right now.

6 picks