AI Coding Live News

Anomaly, the company behind open-source coding agent OpenCode, shipped Hex 3.0 stable: hold a shortcut, speak, and the text is pasted at your cursor. Recognition runs on-device, local model memory drops from about 900 MB to about 160 MB, and it adds vocabulary hints, a hex CLI and optional OpenCode rewriting.

Zoom

Cloud security firm Wiz published research on October 30 saying at least nine AI developer platforms disclosed incidents this month: Fireworks AI, Andromeda, Zeabur, Lightning AI, OpenCode, Railway, Warp, CommandCode and Northflank. Attackers hunted stored environment variables, especially keys for paid AI models; Wiz traced two stolen enterprise keys to roughly 800,000 and 1.7 million Amazon Bedrock calls, which it estimates likely ran over $100k at list price in those two cases alone.

Zoom

Microsoft Research, Microsoft Security and UC Berkeley open-sourced TokenEconomizer on GitHub (Apache 2.0, v0.1.0 released October 26), a plugin for Claude Code, Codex, GitHub Copilot CLI and Pi, with experimental opencode support. It learns from earlier sessions in the same repository: micro-skills remember repo facts, tool pruning drops tool definitions that go unused, and a loop guard nudges an agent that is stuck. The paper reports 18.4–30.9% lower mean cost across five agent and model combinations on 277 SWE-Bench tasks (paper figures).

Zoom

AI coding agent company Factory announced Droid 1.0 on X and its blog at 22:31 UTC on Oct 29, calling it the largest update yet to its agent harness. The key change makes programmatic tool calling (PTC) the default: the model writes a JavaScript program that runs up to hundreds of tool calls in a sandbox in one model request. In Factorys own Terminal-Bench 4 runs, Droid scored 57.6% with GPT-6.1 Sol ($0.79 per passed task) and 65.2% with Claude Opus 5.5 ($4.73), ahead of Codex, Claude Code, Cursor, OpenCode and Devin on the same models.

Zoom

On Oct 20, Vercel released durable-harness, an open-source package (Apache 2.0, npm 0.0.1-beta.6, marked experimental). It adds durability from the outside to existing coding-agent harnesses such as Pi, OpenCode, Codex and Claude Code: every model and tool call is logged before and after it runs in a Workflow SDK World, and if a function times out or crashes, a queue hands the turn to a new function that resumes from the log, so finished model calls are not billed twice. It runs on Vercel, on local files, or on self-hosted Postgres and other backends.

Zoom

Ollama launched US- and EU-hosted Ollama Cloud with strict zero data retention and zero training, adding immediate support for DeepSeek-V4.1-Flash-1017 via one-line launch commands for Claude Code and OpenCode alongside Ollama v0.40.6. Meanwhile, SemiAnalysis revealed that GLM-5.3 was built entirely by post-training the previous GLM-5.2 base model without pretraining from scratch, achieving a 'night and day difference' in cybersecurity and agentic capabilities.

Zoom

OpenCode (@opencode), the wildly popular open-source terminal coding agent, announced free access to both Zhipu AI's high-speed GLM 5.3 Flash and Reflection AI's newly released 501B/23B MoE model Beam with a full 1M-token context window. The GLM 5.3 Flash announcement alone surged past 1.92 million views and 17,500 likes on X within hours.

Zoom

At Config India on 2026-10-15 Figma launched agent-oriented features: Code Layers (running code on the canvas) in open beta on all plans, Specs (collaborative Markdown spec containers) in open beta on paid plans, Guidelines in open beta and Code Sources in closed beta. The Figma MCP server can now generate code layers and read/write Specs, with 20 new MCP partner integrations including OpenCode and JetBrains Junie.

Zoom

An LLM agent's practical capabilities depend as much on its execution harness as on its underlying model. Deploying recursive self-improvement (RSI) in open worlds is hampered by the absence of ground-truth verifiers and poor generalization across novel domains. Google Cloud AI Research introduced Harness², a two-level recursive framework: task-level recursion refines task-specific harnesses via a contrastive Propose-Probe-Compose step without ground-truth verifiers, while harnessing-level recursion extracts continual adaptation experience. Harness² delivers up to +11.8% on LAB, +11.5 points on WorkBuddy-Bench, and +4.5 points on JobBench on GLM-5 and Gemini 3.5 Flash. Code is open-sourced on GitHub under Apache-2.0 (google-research/harness2), supporting OpenCode and Codex executors plus JobBench, LAB and WorkBuddy-Bench.

Zoom

On 2026-10-12 LightOn AI released ColGrep-Agent-2B (fine-tuned from MiniCPM5-2B, Apache-2.0): a local 2B code-localization agent that searches with ColGrep multi-vector retrieval plus a read-only terminal, then returns file paths and line ranges to a frontier coding agent. On 52 code-search questions across 13 unseen repos (624 Claude Code / Sonnet 5.5 sessions), delegating search cut API tokens ~34.3% and cache-aware cost ~40% vs grep, with 80.8% vs 83.3% accuracy (not statistically significant). On SWE-bench Lite localization it posted 19.92 line F1—best among models evaluated in the same ColGrep harness, including several >10× larger. Ships brew/cargo/GGUF installers and hooks for Claude Code, Codex, and OpenCode.

Zoom

Anomaly published the OpenCode 2.0 launch note on Oct 12: a single auto-started local service shared by the TUI, web and desktop apps; a rewritten server API with the new @opencode/client; @opencode/codemode, which turns MCP servers and OpenAPI endpoints into functions the model composes in scripts (all MCP servers opt into Code Mode by default); background subagents and background shell commands; 80+ internal features rebuilt as hot-reloadable plugins; and @opencode/sdk for embedding the same engine as a library. V1 plugins and the old server API are not compatible.

Zoom