AICoder

AI Coding Live News

First-hand AI coding updates from 𝕏/Twitter frontier labs and researchers, distilled by AI with entity benchmarks.

Explore live on 𝕏 ↗

AI Coding Live News

L
Louis Raillé@Louis-CFM·
👀143
🔥97

Coucou hits ★3146: open-source notch companion for Claude Code/Codex approvals; Linux beta ships

Open-source Louis-CFM/coucou (MIT, ★3146) parks Claude Code/Codex/Cursor/Gemini CLI/Antigravity sessions in the Mac notch (top-edge island on Windows/Linux), with in-island Allow/Deny/Always approvals, live diffs, file drop, and service pills. macOS v0.1.3 shipped 2026-10-03; Linux 0.1.1 beta is out; Windows installer is paused for a Defender false positive.

Coucou hits ★3146: open-source notch companion for Claude Code/Codex approvals; Linux beta ships

Key Takeaways

  • Repo Louis-CFM/coucou MIT — ★3146 / 494 forks at dig time; site louis-cfm.github.io/coucou
  • Watches Claude Code, Codex, Cursor, Gemini CLI, Antigravity; third-party pills via coucou_agent (AGENTS.md)
  • In-island Allow/Deny/Always + AskUserQuestion for Claude Code; hooks no-op if Coucou is closed (never blocks the CLI)
  • macOS v0.1.3 (2026-10-03); Linux linux-v0.1.1 beta; Windows installer paused (Defender FP — build from source)
  • No telemetry/account; secrets in OS keystores
Read full story
Linked Models & Agents:
🤖 Claude Code🤖 Codex🤖 Cursor🤖 Gemini CLI🤖 Antigravity🤖 Coucou🌐 Anthropic🌐 OpenAI🌐 Google
#Coucou#Claude code#Codex#Notch#Dynamic island#Agent companion#Macos#Linux#Open source#Hooks
y
yetone@yetone·
👀224
🔥95

yetone open-sources Magpie: one menu-bar picker for Claude Code/Codex/Gemini CLI; local gateway translates OpenAI/Anthropic/Gemini APIs (~4282★)

yetone/magpie (MIT, since ~2026-09-23) collapses per-agent model config into a menu bar + local gateway at 127.0.0.1:3425/v1 that speaks OpenAI Chat/Responses, Anthropic Messages, and Gemini—streaming, tools, and reasoning translated both ways. Add DeepSeek/Kimi/GLM/OpenRouter/Ollama or Claude/ChatGPT/Copilot logins once; pick models in Codex, Claude Code, Gemini CLI, OpenCode, etc. At ingest: 4282★ / 275 forks; site usemagpie.ai.

Key Takeaways

  • Repo yetone/magpie MIT; site usemagpie.ai; intent docs usemagpie.ai/docs/intent
  • At ingest: 4282★ / 275 forks; created 2026-09-23T16:22:35Z; latest binary tag v0.1.697 (2026-10-03T02:04:55Z)
  • Local gateway translates OpenAI/Anthropic/Gemini; routing groups smart/order/rotate/usage; optional intent classifier per turn
  • Claude/ChatGPT/Copilot sign-ins become providers; keys stay in Magpie
  • Install: curl usemagpie.ai/install.sh | sh or go install; then magpie provider add / magpie claude|codex|gemini
Read full story
Linked Models & Agents:
🤖 Claude Code (Anthropic)🤖 codex🤖 gemini-cli🤖 opencode🤖 magpie🌐 yetone
#Magpie#Yetone#model router#Claude Code#Codex#Gemini CLI#Gateway#MIT#OpenRouter#intent routing
G
Gemini CLI@GEMINI_CLI·
👀57
🔥88

Gemini CLI stable hits v0.61.0: hardened sandbox boundaries and indirect prompt-injection defenses

Gemini CLI’s stable channel moved to v0.61.0 on 2026-09-23 (npm @google/[email protected]), bringing indirect prompt-injection defenses, hardened sandbox filesystem boundaries and isolated runtime state, AgentLoopContext preservation across object spreads, and correct handling of explicit versioned Flash model IDs.

Gemini CLI stable hits v0.61.0: hardened sandbox boundaries and indirect prompt-injection defenses

Key Takeaways

  • Install stable with npm install -g @google/gemini-cli (now 0.61.0); preview/nightly remain separate tags
  • Blocks indirect prompt injection via build-file edits and untrusted flags (#29250)
  • Hardens sandbox filesystem boundaries and isolates runtime state (#29214)
  • Preserves AgentLoopContext fields across object spreads (#29335)
  • Keeps explicit versioned Flash model IDs intact during routing (#29252)
Read full story
Linked Models & Agents:
⚡ Gemini Flash🤖 Gemini CLI🌐 Google
#Gemini CLI#Google#Sandbox#Security#prompt injection
J
JetBrains@jetbrains·
👀56
🔥93
View on 𝕏 ↗

JetBrains launches Air: an open agentic product system for developers, teams, and governance

JetBrains (@jetbrains) announced JetBrains Air, an open product system for agentic software development that connects IDE-side agent orchestration, team workflows, and organizational governance (formerly JetBrains Central). Air is multi-vendor: steer Claude, Codex, Gemini CLI, and JetBrains Junie inside JetBrains IDEs, and plug in other harnesses via the Agent Client Protocol (ACP). The company blog also outlines Air Teams and Air Governance.

JetBrains launches Air: an open agentic product system for developers, teams, and governance

Key Takeaways

  • Air unifies IDE agent UX, team workflows, and org governance as one open system.
  • Orchestrate multi-vendor agents (including Junie) in JetBrains IDEs; ACP for compatible harnesses.
  • Air Governance (ex-Central) covers policy, visibility, audit, and AI cost control.
Read full story
Linked Models & Agents:
🤖 junie🌐 jetbrains
#JetBrains Air#ACP#Junie#agentic IDE#Governance
ADSponsored
D
Dan Kornas@DanKornas·
👀51
🔥93
View on 𝕏 ↗

Interceptor: CLI and MCP that drive your signed-in Chrome/Brave/Safari session and macOS apps

@DanKornas highlighted Interceptor (github.com/Hacker-Valley-Media/Interceptor), an agent browser and macOS control stack: one CLI plus extension drives your existing Chrome/Brave/Safari session (cookies, logins, tabs intact), with page actions, passive network capture, record-and-replay, and macOS accessibility/trusted input plus on-device vision/speech. Wires into Claude Code, Codex, Gemini CLI, and Cursor.

Interceptor: CLI and MCP that drive your signed-in Chrome/Brave/Safari session and macOS apps

Key Takeaways

  • Drive existing Chrome/Brave/Safari sessions instead of a blank automated profile.
  • Passive capture of fetch/XHR/SSE/WebSocket traffic plus record-and-replay.
  • macOS app control; wires Claude Code, Codex, Gemini CLI, and Cursor.
Read full story
Linked Models & Agents:
🤖 Claude Code (Anthropic)🤖 codex🤖 Cursor Composer (Agent Mode)🤖 gemini-cli
#Interceptor#MCP#browser automation#Chrome#macOS#Claude Code#Codex#Cursor
D
Dan Kornas@DanKornas·
👀78
🔥92
View on 𝕏 ↗

HOL Guard open-sources a local-first security layer that reviews agent actions before they run

@DanKornas highlighted HOL Guard, an open-source local-first security layer that reviews shell commands, file access, package ops, and MCP tool calls before they run—allow, block, or approve by policy. Integrates Codex, Claude Code, Copilot CLI, Cursor, Gemini CLI, and more. Apache 2.0.

Key Takeaways

  • Pre-execution reviews for commands, files, packages, and MCP calls.
  • Policy allow/block/approve with a local CLI and dashboard.
  • Integrates Codex, Claude Code, Cursor, Gemini CLI, and more.
Read full story
Linked Models & Agents:
🤖 Claude Code (Anthropic)🤖 codex🤖 Cursor Composer (Agent Mode)
#HOL Guard#agent security#MCP#Claude Code#Codex#Cursor#open source
A
Average AI Bro@AverageAiBro·
👀49
🔥90
View on 𝕏 ↗

skill-audit scans agent skills, plugins, and MCP configs for supply-chain risk

@AverageAiBro highlighted ondrej-merkun/skill-audit, a local scanner for prompt-injection and malware patterns across Claude Code, Codex, Copilot, Cursor, Gemini CLI, Windsurf, Cline, AGENTS.md, installed skills, plugins, and MCP configs. It ships 46 rules with no cloud upload, optional deeper review through localhost OpenAI-compatible models, CI support via --fail-on REVIEW, and a GitHub Action under the @ondrej-merkun/skill-audit npm package.

Key Takeaways

  • Scans skills, plugins, MCP configs, and AGENTS.md locally across major coding-agent clients.
  • Forty-six rules detect prompt injection and malware patterns without uploading configs to the cloud.
  • Supports --fail-on REVIEW, a GitHub Action, and optional localhost model review for install and CI gates.
Read full story
Linked Models & Agents:
🤖 Claude Code (Anthropic)🤖 Cursor Composer (Agent Mode)🤖 Cline (VS Code Agent)
#Skill audit#prompt injection#Malware#MCP#Claude Code#Cursor#Cline#supply chain#open source
D
Dan Kornas@DanKornas·
👀48
🔥92
View on 𝕏 ↗

agmsg open-sources local SQLite messaging for CLI coding agents

@DanKornas introduced agmsg, a local messaging tool for Claude Code, Codex, Gemini CLI, and GitHub Copilot CLI. Independent agent sessions coordinate through one shared SQLite store without a daemon, network service, or human copy-paste relay; durable history can be replayed into a fresh session, with monitor, turn, both, and manual delivery modes. The Bash + sqlite3 project is MIT-licensed and offers npx, plugin, and direct-script installation paths.

Key Takeaways

  • A shared local SQLite transport lets independent CLI agent sessions hand work to one another directly.
  • Durable history can be replayed into fresh sessions, with monitor, turn, both, and manual delivery modes.
  • Bash + sqlite3, MIT open source, covering Claude Code, Codex, Gemini CLI, and Copilot CLI.
Read full story
Linked Models & Agents:
🤖 Claude Code (Anthropic)
#Agmsg#CLI agents#SQLite#Claude Code#Codex#Gemini CLI#Copilot CLI#MIT#open source
H
Help Net Security@helpnetsecurity·
👀122
🔥95

AIR Researchers Disclose Plugin4Shell Zero-Click RCE Flaw in Leading Coding Agents

Cybersecurity firm AIR uncovered Plugin4Shell, a critical zero-click RCE flaw across Claude Code, Codex, GitHub Copilot, and Gemini CLI. The vulnerability bypasses plugin SHA-pinning validation, enabling attackers to substitute legitimate extensions with malicious payloads during unattended sessions.

Key Takeaways

  • Bypasses extension SHA pinning to hijack unattended plugin installs with arbitrary code
  • Afflicts prominent coding CLI assistants, prompting immediate isolation protocols
  • Sparks urgent adoption of cryptographic code-signing for third-party MCP extensions
Read full story
Linked Models & Agents:
🤖 Claude Code🤖 GitHub Copilot🤖 Codex🤖 Gemini CLI
#Plugin4Shell#Zero-Click RCE#AI Security#Coding Agents#Vulnerabilities
Z
ZeroDay Research@zeroday_sec·
👀52
🔥94

Critical Zero-Click RCE Vulnerability Disclosed Across Major AI Coding Agents

Cybersecurity researchers disclosed a critical zero-click remote code execution vulnerability impacting Claude Code, Codex, GitHub Copilot, and Gemini CLI. The flaw exploits weaponized repo metadata during autonomous indexing, spurring an industry-wide push for strict containerization.

Key Takeaways

  • Uncovers indirect prompt injection chain during autonomous repo ingestion
  • Requires zero user clicks, potentially compromising host developer environments
  • Accelerates emergency vendor patching and cements container isolation as mandatory
Read full story
Linked Models & Agents:
🤖 Claude Code🤖 GitHub Copilot🤖 Codex🤖 Gemini CLI
#Security#RCE#Coding Agents#Vulnerability#DevSecOps
ADSponsored
C
CCXT Library@ccxt_official·
👀48
🔥84
View on 𝕏 ↗

CCXT ships official ccxt-mcp: 100+ exchanges/prediction markets for Claude Code and Cursor

CCXT launched the official ccxt-mcp MCP server so AI agents can reach 100+ crypto exchanges and prediction markets—read markets, check balances, and place trades. It works with Claude Code, Codex, Gemini CLI, Cursor, and any MCP client. One-line npx install; market data needs no keys; trading is off by default; OSS at github.com/ccxt/ccxt.

Key Takeaways

  • Official ccxt-mcp covers 100+ exchanges and prediction markets for Claude Code, Codex, Gemini CLI, Cursor, and other MCP clients.
  • Market data needs no API keys; trading is disabled by default.
  • Open source at github.com/ccxt/ccxt with one-line npx install.
Read full story
Linked Models & Agents:
🤖 Claude Code (Anthropic)🤖 openai-codex🤖 cursor
#CCXT#Ccxt MCP#MCP#Claude Code#Codex#Cursor#Crypto
j
janak@janaksunil·
👀39
🔥96
View on 𝕏 ↗

Specific launches Real-SWE: private production codebases; Fable+Claude Code tops at 38.8%

Specific Labs (@janaksunil) launched Real-SWE, evaluating coding agents on private, out-of-distribution production codebases from real companies (200K+ user apps, fintech statement pipelines, enterprise sales tools, and more). On the public board (8-run averages) Claude Fable 5.1 + Claude Code leads at 38.8%, GPT-6 Astra + Codex CLI at 33.8%, and Gemini 3.8 Flash + Gemini CLI at 31.2% — none clear 40%. Site: realswe.withspecific.com.

Key Takeaways

  • Tasks come from real private company codebases — billing, permissions, customer data — not public contest repos.
  • 8-run averages: Fable 5.1 + Claude Code 38.8%, Astra + Codex CLI 33.8%, Gemini 3.8 Flash + Gemini CLI 31.2%.
  • Built for the systems companies would actually deploy agents into; board at realswe.withspecific.com.
Read full story
Linked Models & Agents:
🤖 Claude Code (Anthropic)🤖 openai-codex🤖 cursor
#Real-SWE#Specific Labs#Claude Code#Codex CLI#Gemini CLI#Fable 5.1#GPT-6 Astra#Benchmark
D
Dan Kornas@DanKornas·
👀59
🔥85
View on 𝕏 ↗

amux: open-source local-first control plane with atomic kanban for parallel Claude Code / Codex / Gemini CLI workers

Dan Kornas (@DanKornas) launched open-source amux: a local-first control plane for parallel coding agents as one Rust binary + SQLite. Coordinate Claude Code, Codex, Gemini CLI, OpenCode, or Ollama workers from a dashboard or phone with atomic kanban claiming, fleet visibility, origin-stamped messaging, schedules/loops, and crash recovery.

Key Takeaways

  • Ship: open-source local-first amux control plane (Rust binary + SQLite).
  • Orchestration: atomic kanban claiming so parallel workers do not collide.
  • Ops: fleet visibility, origin-stamped messaging, schedules/loops, model switch, crash recovery.
Read full story
Linked Models & Agents:
🤖 Claude Code (Anthropic)🤖 openai-codex🤖 gemini-cli
#Amux#Multi agent#Kanban#Claude Code#Codex#Gemini CLI#OpenCode#Ollama#Rust#SQLite#Open source
T
Tyler@md440326799·
👀54
🔥83
View on 𝕏 ↗

Caravel: one workbench with side-by-side diffs and chat for Claude Code / Codex / Cursor / Gemini CLI

Tyler (@md440326799) launched Caravel: Claude Code, Codex, Cursor, Gemini CLI, and OpenCode in one workbench with diffs side-by-side with the chat that produced them, so reviewing agent changes does not mean hopping tabs. See caravel-site.pages.dev and GitHub yy36295238/caravel-releases.

Key Takeaways

  • Ship: Caravel multi-agent workbench.
  • Capability: side-by-side diffs with the producing chat across Claude Code / Codex / Cursor / Gemini CLI / OpenCode.
  • Get: caravel-site.pages.dev; GitHub yy36295238/caravel-releases.
Read full story
Linked Models & Agents:
🤖 Claude Code (Anthropic)🤖 openai-codex🤖 cursor🤖 gemini-cli
#Caravel#Workbench#Diff#Claude Code#Codex#Cursor#Gemini CLI
A
A Pale Blue Dot@yagyaansh·
👀48
🔥88
View on 𝕏 ↗

Turntrail: open-source VS Code extension for local deterministic handoff across Claude Code / Codex / Gemini CLI / Cursor

@yagyaansh launched free open-source VS Code extension Turntrail: local deterministic handoffs across Claude Code, Codex, Gemini CLI, and Cursor using real transcripts and workspace state — plus native session resume, multi-account switching, Codex usage/reset monitoring, and no telemetry.

Key Takeaways

  • Ship: free open-source VS Code extension Turntrail for multi-agent workflows.
  • Mechanism: local deterministic transcript/workspace handoff, no telemetry.
  • Extras: multi-account switching and Codex usage/reset monitoring.
Read full story
Linked Models & Agents:
🤖 Claude Code (Anthropic)🤖 openai-codex🤖 Cursor Composer (Agent Mode)
#Turntrail#VS Code#Claude Code#Codex#Gemini CLI#Cursor#Handoff#Open source
You've caught up with all stories