<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:dc="http://purl.org/dc/elements/1.1/">
  <channel>
    <title>DEV Community: TerminalBlog</title>
    <description>The latest articles on DEV Community by TerminalBlog (@terminalblog).</description>
    <link>https://dev.to/terminalblog</link>
    <image>
      <url>https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F4025038%2F2eb60ff0-093d-46ae-9c20-07ab8050c9be.jpg</url>
      <title>DEV Community: TerminalBlog</title>
      <link>https://dev.to/terminalblog</link>
    </image>
    <atom:link rel="self" type="application/rss+xml" href="https://dev.to/feed/terminalblog"/>
    <language>en</language>
    <item>
      <title>Codex 0.147.0: Portable Plugins, Automatically Approved Reviews, and Safer Defaults</title>
      <dc:creator>TerminalBlog</dc:creator>
      <pubDate>Fri, 07 Aug 2026 04:33:34 +0000</pubDate>
      <link>https://dev.to/terminalblog/codex-01470-portable-plugins-automatically-approved-reviews-and-safer-defaults-1hlj</link>
      <guid>https://dev.to/terminalblog/codex-01470-portable-plugins-automatically-approved-reviews-and-safer-defaults-1hlj</guid>
      <description>&lt;blockquote&gt;
&lt;p&gt;&lt;em&gt;Originally published at &lt;a href="https://terminalblog.com/blog/codex-0-147-portable-plugins-auto-approval/" rel="noopener noreferrer"&gt;terminalblog.com&lt;/a&gt;.&lt;/em&gt;&lt;/p&gt;
&lt;/blockquote&gt;

&lt;p&gt;OpenAI shipped Codex 0.147.0 on August 7, 2026, a few days after 0.146.0 introduced Agent Plugins, named sessions, and thread forking. If 0.146.0 opened the door to an extensions ecosystem, 0.147.0 makes that ecosystem portable, adds an &lt;code&gt;--approve-for-me&lt;/code&gt; flag that hands routine approvals to the agent itself, and quietly tightens security defaults in ways beginners should care about.&lt;/p&gt;

&lt;p&gt;This is a beginner-friendly look at what changed, what it means, and how to use the headline features today.&lt;/p&gt;

&lt;h2&gt;
  
  
  Portable plugins: install once, use anywhere
&lt;/h2&gt;

&lt;p&gt;The biggest practical upgrade is portable Agent Plugins. In 0.147.0, Codex can now install plugins and make them available across every place you run it — your personal machine, a workspace, a shared team project, or a remote host. Instead of a plugin living only in one folder, you can search a catalog and drop it into the scope where you actually need it.&lt;/p&gt;

&lt;p&gt;Why this matters if you are new to Codex: before this release, a plugin you installed for one workspace did not automatically follow you to another. You had to reinstall or manually wire it up per project. Now Codex searches local, personal, workspace, and remote plugin catalogs, so the tools you already use show up regardless of where you are. It feels closer to how &lt;code&gt;npm&lt;/code&gt; finds packages from anywhere on your system.&lt;/p&gt;

&lt;p&gt;Using it looks like this:&lt;br&gt;
&lt;/p&gt;

&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight shell"&gt;&lt;code&gt;&lt;span class="c"&gt;# Search available plugin catalogs for a code-review tool&lt;/span&gt;
codex plugin search code-review

&lt;span class="c"&gt;# Install into your personal catalog so it works in any project&lt;/span&gt;
codex plugin &lt;span class="nb"&gt;install&lt;/span&gt; &amp;lt;name&amp;gt; &lt;span class="nt"&gt;--scope&lt;/span&gt; personal
&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;



&lt;p&gt;The exact catalog flags depend on your setup, but the mental model is one plugin install, many overlapping scopes — with Codex picking the most specific match for the project you are in.&lt;/p&gt;

&lt;h2&gt;
  
  
  &lt;code&gt;--approve-for-me&lt;/code&gt;: let the agent approve routine reviews
&lt;/h2&gt;

&lt;p&gt;Codex has an approval flow: before an agent edits, runs, or interacts with your machine, it asks you to say yes. That keeps humans in control, but for low-risk, repeated actions it can feel like an endless stream of prompts.&lt;/p&gt;

&lt;p&gt;The new &lt;code&gt;--approve-for-me&lt;/code&gt; CLI flag hands a slice of that to the agent. When you start Codex in this mode, it can automatically approve requests that fit the "automatically reviewed approvals" category — which are the ones you would click through anyway, like running a linter or applying a safe, small edit. You still approve anything genuinely sensitive.&lt;/p&gt;

&lt;p&gt;For a beginner, the honest framing is: use it to remove friction only after you trust the session. A quick mental rule is to start a session in normal mode, and switch to auto-approve once the task is a mechanical repeat of something you have already okayed.&lt;/p&gt;

&lt;h2&gt;
  
  
  Import Cursor skills and merge conversations without duplicate mess
&lt;/h2&gt;

&lt;p&gt;If you are evaluating Codex but have muscle memory (and skills) built in Cursor, 0.147.0 removes one of the big switching costs. Codex can now import Cursor-managed skills and, importantly, synchronize changes back to your imported Claude and Cursor conversations without creating duplicates. Instead of a one-way one-time import that copies everything and then drifts out of date, it keeps an eye on the originals and stays in sync.&lt;/p&gt;

&lt;p&gt;This is a nice step toward a multi-agent workflow where you are not locked into one vendor — skills live wherever you like, and Agent Plugins bridge them across.&lt;/p&gt;

&lt;h2&gt;
  
  
  The MCP 2026-07-28 protocol: behind-the-scenes reliability
&lt;/h2&gt;

&lt;p&gt;A chart-topper that you will not see but will feel: Codex adds opt-in support for the MCP 2026-07-28 protocol standard. That brings paginated tool discovery, multi-round requests, and non-blocking server startup. In plain language: more stable connections to external MCP servers, faster startup that no longer stalls your first turn, and the ability to fetch big tool lists in pages instead of all at once.&lt;/p&gt;

&lt;p&gt;Install a few comparison fields — like MCP memory or Gmail — and you may notice fewer hangs and quicker mentions of servers becoming ready.&lt;/p&gt;

&lt;h2&gt;
  
  
  Safer defaults (read this part)
&lt;/h2&gt;

&lt;p&gt;Two changes in 0.147.0 are worth reading for a beginner:&lt;/p&gt;

&lt;ol&gt;
&lt;li&gt;
&lt;strong&gt;Requires explicit trust for unfamiliar projects.&lt;/strong&gt; Before your credentials get used, Codex now requires you to trust a project you have not worked in before. That closes a real gap where an unfamiliar folder could silently consume your auth without a clear prompt.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Redacts secrets and bearer tokens.&lt;/strong&gt; Commands you run and replayed history no longer show full secrets — Codex scrubs them from what is displayed. Combined with stricter plugin isolation (and a denial of network access if a policy update fails), the release is the most safety-conscious package update in a while.&lt;/li&gt;
&lt;/ol&gt;

&lt;p&gt;The explicit-trust change is the one beginners should configure consciously. When you open a download repo, expect a "trust this project?" prompt. Treat that the way you would escalate permissions in any tool — trust only folders you own or from people you trust.&lt;/p&gt;

&lt;h2&gt;
  
  
  Getting started
&lt;/h2&gt;

&lt;p&gt;Update to 0.147.0:&lt;br&gt;
&lt;/p&gt;

&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight shell"&gt;&lt;code&gt;npm &lt;span class="nb"&gt;install&lt;/span&gt; &lt;span class="nt"&gt;-g&lt;/span&gt; @openai/codex
&lt;span class="c"&gt;# or, for the standalone install&lt;/span&gt;
codex update
&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;



&lt;p&gt;Then try auto-approving a low-risk session:&lt;br&gt;
&lt;/p&gt;

&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight shell"&gt;&lt;code&gt;codex &lt;span class="nt"&gt;--approve-for-me&lt;/span&gt;
&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;



&lt;p&gt;And for a repeating task with Cursor skills already built, run the import-step that imports your Cursor skills and lets Codex stay in sync with them.&lt;/p&gt;

&lt;h2&gt;
  
  
  The bottom line
&lt;/h2&gt;

&lt;p&gt;Codex 0.147.0 is a release about daily feel more than headlines: portable plugins that follow you, fewer click-throughs on routine reviews, stronger safeguards by default, and smoother MCP connections. For someone just starting with a coding agent, the pair of features to care most about is &lt;code&gt;--approve-for-me&lt;/code&gt; plus the explicit "trust this project?" prompt. Together they give you the speed of automation without handing over everything at once.&lt;/p&gt;

&lt;p&gt;If you have not tried a terminal coding agent yet and want the security side sorted before experimenting, pairing a cautious default setup with the trust and redaction changes helps you stay safe while you learn.&lt;/p&gt;




&lt;p&gt;&lt;em&gt;Looking to compare AI models without switching tabs? *&lt;/em&gt;&lt;a href="https://aifiesta.link/muhammed-anshad" rel="noopener noreferrer"&gt;aiFiesta&lt;/a&gt;** gives you GPT, Claude, Gemini, Grok, DeepSeek, and Perplexity in one place for $12/mo.*&lt;/p&gt;

&lt;h2&gt;
  
  
  Related articles
&lt;/h2&gt;

&lt;ul&gt;
&lt;li&gt;&lt;a href="https://terminalblog.com/blog/codex-0-146-agent-plugins-session-naming-thread-forking/" rel="noopener noreferrer"&gt;Codex 0.146.0 Adds Agent Plugins, Session Naming, and Thread Forking&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href="https://terminalblog.com/blog/claude-code-vs-codex/" rel="noopener noreferrer"&gt;Claude Code vs OpenAI Codex: open source vs commercial tradeoffs&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href="https://terminalblog.com/blog/beware-codex-desktop-subagent-mcp-resource-crisis/" rel="noopener noreferrer"&gt;Beware: Codex Desktop Quietly Silences a Subagent Resource When MCP Calls Spawn&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href="https://terminalblog.com/blog/agent-loop-plugin-harness-wars-2026/" rel="noopener noreferrer"&gt;The Agent Loop Just Became a Plugin — Coding Agent Wars&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;

</description>
      <category>codex</category>
      <category>openai</category>
      <category>release</category>
      <category>agentplugins</category>
    </item>
    <item>
      <title>OpenHands Agent Canvas 1.10.0: Persistent Memory, Live Agent Activity, and a Friendlier Control Center for Beginners</title>
      <dc:creator>TerminalBlog</dc:creator>
      <pubDate>Fri, 07 Aug 2026 04:32:46 +0000</pubDate>
      <link>https://dev.to/terminalblog/openhands-agent-canvas-1100-persistent-memory-live-agent-activity-and-a-friendlier-control-pmp</link>
      <guid>https://dev.to/terminalblog/openhands-agent-canvas-1100-persistent-memory-live-agent-activity-and-a-friendlier-control-pmp</guid>
      <description>&lt;blockquote&gt;
&lt;p&gt;&lt;em&gt;Originally published at &lt;a href="https://terminalblog.com/blog/openhands-agent-canvas-1-10-0-persistent-memory-automations/" rel="noopener noreferrer"&gt;terminalblog.com&lt;/a&gt;.&lt;/em&gt;&lt;/p&gt;
&lt;/blockquote&gt;

&lt;p&gt;OpenHands, the open-source AI development project with over 83,000 GitHub stars, released &lt;strong&gt;Agent Canvas 1.10.0&lt;/strong&gt; on &lt;strong&gt;August 5, 2026&lt;/strong&gt;. On its own, 1.10.0 looks like a small polish release — a new default model here, an export button there. But bundled with the releases that led up to it, it continues a clear push to make self-hosted coding agents feel more reliable and easier for newcomers to control.&lt;/p&gt;

&lt;p&gt;If you are new to OpenHands — or you have been wondering whether it is worth trying over Claude Code or Codex — this article explains what the project is, what 1.10.0 actually changed, and why the small updates matter more than a version bump suggests.&lt;/p&gt;

&lt;h2&gt;
  
  
  What OpenHands Is (If You Are New)
&lt;/h2&gt;

&lt;p&gt;OpenHands now brands itself as &lt;strong&gt;Agent Canvas&lt;/strong&gt;: a self-hosted "control center" for AI coding agents. Instead of just being one more terminal agent, it is a web app that runs on your machine (or a server) and lets you start conversations, review what the agent did, and set up recurring automations.&lt;/p&gt;

&lt;p&gt;Key facts:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;It runs the open-source OpenHands agent out of the box, but can also drive &lt;strong&gt;Claude Code, Codex, Gemini, or any agent that speaks ACP&lt;/strong&gt; (Agent-Client Protocol).&lt;/li&gt;
&lt;li&gt;It is &lt;strong&gt;self-hosted by default&lt;/strong&gt; — your code and prompts stay on your hardware unless you opt into OpenHands Cloud.&lt;/li&gt;
&lt;li&gt;You can run the agent locally, in a Docker container, on a VM, or on a cloud server, and switch backends from the same interface.&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;For beginners, the practical draw is one UI that lets you watch, pause, and automate an agent instead of trusting it blindly against your whole filesystem.&lt;/p&gt;

&lt;h2&gt;
  
  
  What's Actually New in the Recent Release Cycle
&lt;/h2&gt;

&lt;p&gt;Version numbers come fast (1.8 → 1.9 → 1.10 within a week), so here are the changes that matter for a newcomer, in plain language.&lt;/p&gt;

&lt;h3&gt;
  
  
  1. Persistent agent memory (the headline feature)
&lt;/h3&gt;

&lt;p&gt;In the 1.7.0 cycle, OpenHands added a &lt;strong&gt;persistent agent memory toggle&lt;/strong&gt;. Instead of forgetting everything between chats, the agent can keep a short-term memory across sessions. For a beginner this is a genuinely useful quality-of-life change: you no longer have to re-explain your project layout, your naming conventions, or your goals every single conversation.&lt;/p&gt;

&lt;h3&gt;
  
  
  2. You can finally see what the agent is doing, live
&lt;/h3&gt;

&lt;p&gt;1.9.0 added &lt;strong&gt;live agent activity in the chat view&lt;/strong&gt;, and 1.10.0 adds an &lt;strong&gt;activity log export&lt;/strong&gt;. This is a small thing with a big trust benefit. When a coding agent runs with full filesystem access, "trust but verify" is the only sane approach. Being able to see the agent's steps as they happen — and export a log later for review — gives you a transparency layer you previously did not get in self-hosted setups.&lt;/p&gt;

&lt;h3&gt;
  
  
  3. Automations get a proper dashboard
&lt;/h3&gt;

&lt;p&gt;OpenHands lets you set up agents that run on a schedule or in response to events (a Slack message, a new GitHub issue, a webhook). 1.10.0 ships a &lt;strong&gt;featured automations landing dashboard&lt;/strong&gt; and adds &lt;strong&gt;manifest-driven sub-pages&lt;/strong&gt;, so the whole flow of creating, browsing, and enabling automations is closer to a proper product and less like fiddling with config.&lt;/p&gt;

&lt;h3&gt;
  
  
  4. MCP server controls and creds stay put
&lt;/h3&gt;

&lt;p&gt;MCP (Model Context Protocol) servers are how agents get extra tools. OpenHands already lets you enable/disable an installed MCP server from its card; the latest release also fixes a real foot-gun: &lt;strong&gt;MCP credentials are preserved during the editor's mutations&lt;/strong&gt;, so tweaking a server's config no longer silently drops a secret-like API key you plugged in.&lt;/p&gt;

&lt;h3&gt;
  
  
  5. A new out-of-the-box default model
&lt;/h3&gt;

&lt;p&gt;1.10.0 sets the Canvas default to &lt;strong&gt;GLM 5.2&lt;/strong&gt;. If you do not pick a model, this is what your agent uses. Model choice still comes per project — the default matters mainly because a sensible, cheaper model right off the bat lowers the "wow, this cost me money" surprise for first-time users.&lt;/p&gt;

&lt;h3&gt;
  
  
  6. Skills surfaces
&lt;/h3&gt;

&lt;p&gt;OpenHands keeps its &lt;strong&gt;skills filter with a faceted rail&lt;/strong&gt; in 1.10.0, and earlier fixes stopped disabled skills from being loaded into the agent's context. Put simply, the project is cleaning up context/bloat so your agent reads less irrelevant noise and works on exactly what you asked.&lt;/p&gt;

&lt;h2&gt;
  
  
  How To Try It (Three Ways)
&lt;/h2&gt;

&lt;p&gt;&lt;strong&gt;Option 1 — fastest (no sandbox), thinking beware:&lt;/strong&gt; runs the agent directly on your machine with full filesystem access.&lt;br&gt;
&lt;/p&gt;

&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight shell"&gt;&lt;code&gt;npm &lt;span class="nb"&gt;install&lt;/span&gt; &lt;span class="nt"&gt;-g&lt;/span&gt; @openhands/agent-canvas
agent-canvas
&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;



&lt;p&gt;&lt;strong&gt;Option 2 — safer, with a Docker sandbox:&lt;/strong&gt; the agent only sees the folder you give it.&lt;br&gt;
&lt;/p&gt;

&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight shell"&gt;&lt;code&gt;&lt;span class="nb"&gt;export &lt;/span&gt;&lt;span class="nv"&gt;PROJECTS_PATH&lt;/span&gt;&lt;span class="o"&gt;=&lt;/span&gt;&lt;span class="s2"&gt;"&lt;/span&gt;&lt;span class="nv"&gt;$HOME&lt;/span&gt;&lt;span class="s2"&gt;/projects"&lt;/span&gt;   &lt;span class="c"&gt;# folders the agent may touch&lt;/span&gt;
&lt;span class="nb"&gt;mkdir&lt;/span&gt; &lt;span class="nt"&gt;-p&lt;/span&gt; &lt;span class="s2"&gt;"&lt;/span&gt;&lt;span class="nv"&gt;$PROJECTS_PATH&lt;/span&gt;&lt;span class="s2"&gt;"&lt;/span&gt; &lt;span class="s2"&gt;"&lt;/span&gt;&lt;span class="nv"&gt;$HOME&lt;/span&gt;&lt;span class="s2"&gt;/.openhands"&lt;/span&gt;
docker run &lt;span class="nt"&gt;-it&lt;/span&gt; &lt;span class="nt"&gt;--rm&lt;/span&gt; &lt;span class="nt"&gt;-p&lt;/span&gt; 8000:8000 &lt;span class="se"&gt;\&lt;/span&gt;
  &lt;span class="nt"&gt;-v&lt;/span&gt; &lt;span class="s2"&gt;"&lt;/span&gt;&lt;span class="nv"&gt;$HOME&lt;/span&gt;&lt;span class="s2"&gt;/.openhands:/home/openhands/.openhands"&lt;/span&gt; &lt;span class="se"&gt;\&lt;/span&gt;
  &lt;span class="nt"&gt;-v&lt;/span&gt; &lt;span class="s2"&gt;"&lt;/span&gt;&lt;span class="k"&gt;${&lt;/span&gt;&lt;span class="nv"&gt;PROJECTS_PATH&lt;/span&gt;&lt;span class="k"&gt;}&lt;/span&gt;&lt;span class="s2"&gt;:/projects"&lt;/span&gt; &lt;span class="se"&gt;\&lt;/span&gt;
  ghcr.io/openhands/agent-canvas:1.9.0
&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;



&lt;p&gt;&lt;strong&gt;Option 3 — from source:&lt;/strong&gt; clone &lt;code&gt;OpenHands/OpenHands&lt;/code&gt;, run &lt;code&gt;npm install&lt;/code&gt; then &lt;code&gt;npm run dev&lt;/code&gt;, and open &lt;code&gt;http://localhost:8000&lt;/code&gt;.&lt;/p&gt;

&lt;h2&gt;
  
  
  At a Glance
&lt;/h2&gt;

&lt;div class="table-wrapper-paragraph"&gt;&lt;table&gt;
&lt;thead&gt;
&lt;tr&gt;
&lt;th&gt;Feature&lt;/th&gt;
&lt;th&gt;Where it landed&lt;/th&gt;
&lt;th&gt;Why it matters for you&lt;/th&gt;
&lt;/tr&gt;
&lt;/thead&gt;
&lt;tbody&gt;
&lt;tr&gt;
&lt;td&gt;Persistent agent memory&lt;/td&gt;
&lt;td&gt;1.7.0&lt;/td&gt;
&lt;td&gt;Agent remembers project context between chats&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;Live activity + activity-log export&lt;/td&gt;
&lt;td&gt;1.9 / 1.10&lt;/td&gt;
&lt;td&gt;You can see/verify what the agent is doing&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;Automations dashboard&lt;/td&gt;
&lt;td&gt;1.10.0&lt;/td&gt;
&lt;td&gt;Recurring agents are easier to set up and manage&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;MCP credentials preserved&lt;/td&gt;
&lt;td&gt;1.10.0&lt;/td&gt;
&lt;td&gt;Editing config no longer drops secrets&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;GLM 5.2 default model&lt;/td&gt;
&lt;td&gt;1.10.0&lt;/td&gt;
&lt;td&gt;Cheaper, safer default out of the box&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;Skills context cleanup&lt;/td&gt;
&lt;td&gt;1.8–1.10&lt;/td&gt;
&lt;td&gt;Less token noise, sharper behavior&lt;/td&gt;
&lt;/tr&gt;
&lt;/tbody&gt;
&lt;/table&gt;&lt;/div&gt;

&lt;h2&gt;
  
  
  Bottom Line
&lt;/h2&gt;

&lt;p&gt;1.10.0 is not an earth-shattering release on its own — most commits are UI and internal plumbing. But read together with the persistent-memory work and the live activity view, the direction is clear: OpenHands is spending its effort on &lt;strong&gt;visible control, verified behavior, and lower cost of entry&lt;/strong&gt; for self-hosted agents. For a beginner, that is exactly the right place to spend it.&lt;/p&gt;

&lt;p&gt;Start with the Docker sandbox option so the agent lives in a box you can throw away, enable persistent memory once you trust it, and use the activity log to review what it did before you ever merge. That pattern keeps the power of a coding agent without giving an autonomous process free rein over your machine.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;New here? Start reading next:&lt;/strong&gt;&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;&lt;a href="https://terminalblog.com/blog/ai-agent-config-directory-attack-surface-2026/" rel="noopener noreferrer"&gt;Your AI Agents Config Directory Is Now the Most Dangerous Place on Your Machine&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href="https://terminalblog.com/blog/cline-v4-1-sdk-migration-five-critical-agent-fixes/" rel="noopener noreferrer"&gt;Cline v4.1.0: Five Critical Agent Fixes and the SDK Migration That Stops AI From Going Rogue&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;

&lt;h2&gt;
  
  
  Related articles
&lt;/h2&gt;

&lt;ul&gt;
&lt;li&gt;&lt;a href="https://terminalblog.com/blog/model-musical-chairs-hn-developers-death-of-ai-loyalty/" rel="noopener noreferrer"&gt;Model Musical Chairs: What 500 Hacker News Comments Reveal About the Death of AI Model Loyalty&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href="https://terminalblog.com/blog/qwen3-8-max-2-4t-autonomous-coding-open-weights/" rel="noopener noreferrer"&gt;Qwen3.8-Max Ships With 2.4T Parameters, 16-Day Autonomous Coding Demo, and Open Weights Coming Next Week&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href="https://terminalblog.com/blog/hn-vibe-coded-tool-flood-backlash/" rel="noopener noreferrer"&gt;What Developers Think About the Vibe-Coded Tool Flood — From 40 HN Comments&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;

</description>
      <category>openhands</category>
      <category>agentcanvas</category>
      <category>codingagents</category>
      <category>release</category>
    </item>
    <item>
      <title>How to Set Up AI Coding Agents — Beginner's Guide</title>
      <dc:creator>TerminalBlog</dc:creator>
      <pubDate>Fri, 07 Aug 2026 04:32:39 +0000</pubDate>
      <link>https://dev.to/terminalblog/how-to-set-up-ai-coding-agents-beginners-guide-142j</link>
      <guid>https://dev.to/terminalblog/how-to-set-up-ai-coding-agents-beginners-guide-142j</guid>
      <description>&lt;blockquote&gt;
&lt;p&gt;&lt;em&gt;Originally published at &lt;a href="https://terminalblog.com/blog/how-to-setup-ai-coding-agents/" rel="noopener noreferrer"&gt;terminalblog.com&lt;/a&gt;.&lt;/em&gt;&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;This is the setup pillar.&lt;/strong&gt; If you are setting up a coding agent for the first time, start here and follow every step in order. Each step links to the full how-to and deep-dive posts on this site so you can go as deep as you want. Need a newer look at setup live in production? See the &lt;a href="https://terminalblog.com/blog/best-coding-agent-setup-six-months/" rel="noopener noreferrer"&gt;6-month layered setup&lt;/a&gt;.&lt;/p&gt;
&lt;/blockquote&gt;

&lt;p&gt;Also read: &lt;a href="https://terminalblog.com/blog/best-coding-agents-2026-decision-guide/" rel="noopener noreferrer"&gt;Best coding agents decision guide&lt;/a&gt; · &lt;a href="https://terminalblog.com/blog/coding-agent-security-checklist-2026/" rel="noopener noreferrer"&gt;Security checklist&lt;/a&gt; · &lt;a href="https://terminalblog.com/blog/coding-agent-pricing-guide-2026/" rel="noopener noreferrer"&gt;Pricing guide&lt;/a&gt;&lt;/p&gt;

&lt;h2&gt;
  
  
  What you are actually setting up
&lt;/h2&gt;

&lt;p&gt;A coding agent is a program that turns a natural-language instruction into real edits, commands, and git operations. Most beginners assume it is "a smarter autocomplete." It is not. It is a process with a shell, a filesystem, a git client, and your environment variables. That distinction drives every setup decision below, especially security.&lt;/p&gt;

&lt;p&gt;Before you install anything, decide which kind of thing you want:&lt;/p&gt;

&lt;ol&gt;
&lt;li&gt;
&lt;strong&gt;Terminal agent&lt;/strong&gt; — you type instructions in your command line, it plans multi-file edits and runs them. Best if you live in a terminal. Examples: Claude Code, Codex, OpenCode, Hermes, Goose, Copilot CLI.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;IDE agent&lt;/strong&gt; — it lives inside your editor, sees your repo, and edits in place. Best if you want visual, inline diffs. Examples: Cursor, Kilo Code, Mimo Code.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Hybrid / automation agent&lt;/strong&gt; — runs unattended on a schedule or across providers. Best for DevOps. Examples: Hermes (cron), Codex (cloud parallelism), pi.dev.&lt;/li&gt;
&lt;/ol&gt;

&lt;p&gt;Not sure which fits? Read &lt;a href="https://terminalblog.com/blog/what-devs-say-coding-agents-2026/" rel="noopener noreferrer"&gt;how the agents differ&lt;/a&gt; and the &lt;a href="https://terminalblog.com/blog/best-coding-agents-2026-decision-guide/" rel="noopener noreferrer"&gt;decision guide&lt;/a&gt; before you spend a minute installing.&lt;/p&gt;

&lt;h2&gt;
  
  
  Step 1 — Decide free vs paid, and pick your first agent
&lt;/h2&gt;

&lt;p&gt;Your first agent should be &lt;strong&gt;one&lt;/strong&gt;, not five. Pick the cheapest thing that covers your daily workflow, then add agents only when a gap shows. A common beginner mistake is signing up for four $20 subscriptions on day one. The cheapest and most honest start for most people is a &lt;strong&gt;free, BYO-key terminal agent&lt;/strong&gt; (OpenCode or Hermes) or the cheapest subscription tier of Claude Code or Cursor.&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;&lt;a href="https://terminalblog.com/blog/coding-agent-pricing-guide-2026/" rel="noopener noreferrer"&gt;Pricing guide: free vs subscription vs pay-as-you-go&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href="https://terminalblog.com/blog/what-8-coding-agents-cost-per-month/" rel="noopener noreferrer"&gt;What 8 coding agents actually cost per month&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href="https://terminalblog.com/blog/best-coding-agents-2026-decision-guide/" rel="noopener noreferrer"&gt;Decision guide: which agent for which job&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;

&lt;h2&gt;
  
  
  Step 2 — Install your agent
&lt;/h2&gt;

&lt;p&gt;Installing differs by tool, but the shape is identical everywhere: you download a binary or clone a repo, run a one-line installer, and get a prompt. Here are the per-tool install-and-first-run deep dives:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;&lt;a href="https://terminalblog.com/blog/deep-dive-claude-code-anthropic-coding-agent/" rel="noopener noreferrer"&gt;Setup Claude Code, Anthropic's terminal agent&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href="https://terminalblog.com/blog/deep-dive-hermes-agent-autonomous-coding-assistant/" rel="noopener noreferrer"&gt;Setup Hermes Agent — a step-by-step overview&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href="https://terminalblog.com/blog/deep-dive-opencode-skill-driven-coding-agent/" rel="noopener noreferrer"&gt;Setup OpenCode — the skill-driven terminal agent&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href="https://terminalblog.com/blog/deep-dive-kilo-code-cli-lightweight-llm-orchestrator/" rel="noopener noreferrer"&gt;Setup Kilo Code — the lightweight orchestrator&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href="https://terminalblog.com/blog/deep-dive-pi-dot-dev-personal-intelligence-agent/" rel="noopener noreferrer"&gt;Discover why pi.dev is a personal intelligence agent&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href="https://terminalblog.com/blog/copilot-cli-terminal-agent-github-repos/" rel="noopener noreferrer"&gt;Copilot CLI — the GitHub-native terminal agent&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href="https://terminalblog.com/blog/run-claude-codex-in-browser/" rel="noopener noreferrer"&gt;Install and use Codex in your browser&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;If you are on Windows, read &lt;a href="https://terminalblog.com/blog/windows-stepchild-coding-agents-fixing-up/" rel="noopener noreferrer"&gt;why Windows is the awkward child for coding agents&lt;/a&gt; before you blame yourself. Most hang-ups on Windows come from sandbox and permission quirks that are documented fixes, not your fault.&lt;/p&gt;

&lt;h2&gt;
  
  
  Step 3 — Add the model keys (BYO vs. bundled)
&lt;/h2&gt;

&lt;ul&gt;
&lt;li&gt;
&lt;strong&gt;Bundled subscription agents&lt;/strong&gt; (Claude Code, Cursor): sign in, done. No keys to manage.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;BYO-key agents&lt;/strong&gt; (OpenCode, Hermes, Goose, Kilo, Mimo): you paste in an API key from Anthropic, OpenAI, Google, or OpenRouter. Keep keys out of the codebase and out of shared &lt;code&gt;.env&lt;/code&gt; files.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Local models&lt;/strong&gt; (Ollama): everything stays on your machine. See the full &lt;a href="https://terminalblog.com/blog/run-coding-agents-ollama-local-models-guide/" rel="noopener noreferrer"&gt;run agents on local models guide&lt;/a&gt;.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;No install at all&lt;/strong&gt;: run a coding agent in the browser via &lt;a href="https://terminalblog.com/blog/google-ai-studio-github-import-autodeploy/" rel="noopener noreferrer"&gt;Google AI Studio's GitHub autodeploy&lt;/a&gt;.&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;The easiest portable option when you are testing multiple models is a single multi-provider key like OpenRouter — one credential that reaches many models, instead of managing a different key per model vendor.&lt;/p&gt;

&lt;h2&gt;
  
  
  Step 4 — Harden it before you trust it
&lt;/h2&gt;

&lt;p&gt;An agent inherits everything your shell can reach. Do &lt;strong&gt;not&lt;/strong&gt; skip this. At bare minimum, before your first real task:&lt;/p&gt;

&lt;ol&gt;
&lt;li&gt;Turn &lt;strong&gt;off auto-approve&lt;/strong&gt; for destructive commands.&lt;/li&gt;
&lt;li&gt;Verify session isolation actually works — do not trust a "sandbox enabled" toggle.&lt;/li&gt;
&lt;li&gt;Keep API keys in a scoped env, not in the repo.&lt;/li&gt;
&lt;/ol&gt;

&lt;p&gt;The full, runnable version is the &lt;a href="https://terminalblog.com/blog/coding-agent-security-checklist-2026/" rel="noopener noreferrer"&gt;coding agent security checklist&lt;/a&gt;. It is short and every check ends in a command you can paste. Also read &lt;a href="https://terminalblog.com/blog/what-coding-agent-knows-codebase/" rel="noopener noreferrer"&gt;what your coding agent knows about your codebase&lt;/a&gt; so you know what you are handing it.&lt;/p&gt;

&lt;h2&gt;
  
  
  Step 5 — Write an AGENTS.md and give it context
&lt;/h2&gt;

&lt;p&gt;The single biggest quality multiplier is the instruction file you give the agent — not the tool brand. A well-written AGENTS.md tells the agent your project's conventions, architecture, and rules, and makes even a basic free agent feel 10x smarter.&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;&lt;a href="https://terminalblog.com/blog/agents-dot-md-make-coding-agent-10x-smarter/" rel="noopener noreferrer"&gt;AGENTS.md — the universal instruction sheet&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href="https://terminalblog.com/blog/agents-md-complete-guide/" rel="noopener noreferrer"&gt;The complete AGENTS.md guide&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href="https://terminalblog.com/blog/context-engineering-for-coding-agents-2026/" rel="noopener noreferrer"&gt;Context engineering for coding agents 2026&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href="https://terminalblog.com/blog/ui-md-design-rules-coding-agents/" rel="noopener noreferrer"&gt;UI.md — better contracts for agent-built interfaces&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href="https://terminalblog.com/blog/claude-code-frontend-design-skill/" rel="noopener noreferrer"&gt;Teach agents design rules with frontend skills&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;Without this step, you are using a powerful tool with no instructions and blaming it for being generic. Spend the 30 minutes on an &lt;code&gt;AGENTS.md&lt;/code&gt;.&lt;/p&gt;

&lt;h2&gt;
  
  
  Step 6 — Make it reliable: checkpoints, memory, and review
&lt;/h2&gt;

&lt;p&gt;Once the first task works, harden the flow:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;
&lt;strong&gt;Checkpoint before every run.&lt;/strong&gt; &lt;code&gt;git stash push -u -m "pre-agent"&lt;/code&gt; — a stash is cheaper than a postmortem. If you hit a lock or stale-state hang, see &lt;a href="https://terminalblog.com/blog/claude-code-lock-issues-workflow-fix/" rel="noopener noreferrer"&gt;Claude Code lock / workflow fixes&lt;/a&gt;.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Add guardrails first, not later.&lt;/strong&gt; Agents can trip your EDR rules like attackers and leak secrets in surprising ways (&lt;a href="https://terminalblog.com/blog/coding-agents-security-hardening-wave/" rel="noopener noreferrer"&gt;security hardening wave&lt;/a&gt;). &lt;a href="https://terminalblog.com/blog/coding-agents-build-circuit-breakers-2026/" rel="noopener noreferrer"&gt;Build circuit-breakers&lt;/a&gt; so a runaway task stops itself.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Deal with memory.&lt;/strong&gt; Agents forget context between sessions. Learn the &lt;a href="https://terminalblog.com/blog/coding-agents-amnesia-memory-tools-fixing-it/" rel="noopener noreferrer"&gt;memory tools and fixes&lt;/a&gt; and how &lt;a href="https://terminalblog.com/blog/hermes-memory-persistent-context-mem0-cross-session/" rel="noopener noreferrer"&gt;Hermes persists context across sessions&lt;/a&gt;.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Add skills/plugins.&lt;/strong&gt; Most terminal agents accept plugins or skills to extend them (&lt;a href="https://terminalblog.com/blog/hermes-skill-system-plugins-extending-agent/" rel="noopener noreferrer"&gt;Hermes skill system&lt;/a&gt;).&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Automate the boring parts.&lt;/strong&gt; Move recurring maintenance (deps, audits, PR checks) into &lt;a href="https://terminalblog.com/blog/hermes-cron-jobs-scheduled-automation-tasks/" rel="noopener noreferrer"&gt;cron jobs&lt;/a&gt; and &lt;a href="https://terminalblog.com/blog/automate-code-review-ai-agents/" rel="noopener noreferrer"&gt;automated code review&lt;/a&gt;.&lt;/li&gt;
&lt;/ul&gt;

&lt;h2&gt;
  
  
  Step 7 — Your first real task
&lt;/h2&gt;

&lt;p&gt;Start small, on a test repo, with human approval on: fix a lint error, add one test, rename a variable across a module (but never in &lt;code&gt;main&lt;/code&gt;). Most first runs are far easier on a throwaway branch. Expect the first session to feel slower than you'd like — that is normal. The setup minutes you invest in steps 4 and 5 pay back on every later run, and skipping them is why beginners quit their agent after a week and call it a toy.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Your 30-second first-run sanity check:&lt;/strong&gt; the agent survives a short task end-to-end, you can see every command it wants to run before it runs it, and a &lt;code&gt;git status&lt;/code&gt; after the task shows exactly the files you expected — nothing else.&lt;/p&gt;

&lt;h2&gt;
  
  
  The six-month view
&lt;/h2&gt;

&lt;p&gt;Once you have one agent working, most people do &lt;strong&gt;not&lt;/strong&gt; want to rip it out; they layer. The field-tested version of that is a three-layer setup (fast edits in an IDE agent + deep refactors in a terminal agent + schedule in an automation twin). Read how one operator runs it after 6 months and why they stopped using a single agent:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;&lt;a href="https://terminalblog.com/blog/best-coding-agent-setup-six-months/" rel="noopener noreferrer"&gt;The best coding agent setup after 6 months&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href="https://terminalblog.com/blog/why-i-stopped-using-copilot-went-full-terminal-agent/" rel="noopener noreferrer"&gt;Why I stopped using Copilot and went full terminal agent&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;

&lt;h2&gt;
  
  
  Beginner mistakes that waste the first week
&lt;/h2&gt;

&lt;ol&gt;
&lt;li&gt;
&lt;strong&gt;Skipping &lt;code&gt;AGENTS.md&lt;/code&gt;&lt;/strong&gt; — the top quality lever, and the most skipped. Fix first.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Trusting the sandbox toggle.&lt;/strong&gt; Verify it. This is the top cause of leaked secrets for new users.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Running on &lt;code&gt;main&lt;/code&gt;&lt;/strong&gt; with auto-approve on during the first week. Use a branch.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Collecting three agents thinking one is strictly better.&lt;/strong&gt; Multitool without a plan doubles the failure surface.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Paying for a tier you never use.&lt;/strong&gt; Start free; add the $20 tier only after you hit a real limit (&lt;a href="https://terminalblog.com/blog/coding-agent-pricing-guide-2026/" rel="noopener noreferrer"&gt;pricing guide&lt;/a&gt;).&lt;/li&gt;
&lt;/ol&gt;

&lt;h2&gt;
  
  
  FAQ
&lt;/h2&gt;

&lt;p&gt;&lt;strong&gt;Q1: Do I need a GitHub account to use a coding agent?&lt;/strong&gt; Not for most local agents, but a GitHub account helps for Copilot CLI, Codex cloud parallel execution, and most of the ecosystem. The exception is fully local setup with &lt;a href="https://terminalblog.com/blog/run-coding-agents-ollama-local-models-guide/" rel="noopener noreferrer"&gt;Ollama&lt;/a&gt;.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Q2: What's the cheapest way to start?&lt;/strong&gt; A free BYO-key terminal agent like OpenCode or Hermes with a single API key and a free-tier model can run at $0/month for light usage. See the &lt;a href="https://terminalblog.com/blog/coding-agent-pricing-guide-2026/" rel="noopener noreferrer"&gt;pricing guide&lt;/a&gt; for budgets.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Q3: How important is the sandbox for a beginner?&lt;/strong&gt; More important than the model you choose. A coding agent is a process with your environment; without isolation, a mistake can wipe a repo or leak a token. Run the &lt;a href="https://terminalblog.com/blog/coding-agent-security-checklist-2026/" rel="noopener noreferrer"&gt;security checklist&lt;/a&gt; before the first real task.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Q4: Which agent is easiest to set up?&lt;/strong&gt; Terminal-first: Copilot CLI is the smoothest if you already have a GitHub account; for zero-cost, OpenCode and Hermes take a few minutes but need keys. IDE-first: Cursor installs like an editor and needs no API keys. See the &lt;a href="https://terminalblog.com/blog/best-coding-agents-2026-decision-guide/" rel="noopener noreferrer"&gt;decision guide&lt;/a&gt;.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Q5: I'm on Windows and nothing works.&lt;/strong&gt; Read the &lt;a href="https://terminalblog.com/blog/windows-stepchild-coding-agents-fixing-up/" rel="noopener noreferrer"&gt;Windows stepchild deep dive&lt;/a&gt;. Windows sandbox and permission gaps cause most hang-ups; the fix posts there cover the top failure modes.&lt;/p&gt;

&lt;h2&gt;
  
  
  How we update this page
&lt;/h2&gt;

&lt;p&gt;During each weekly sync we add every new setup / how-to / installation post so it stays the one entry point. We never delete an existing link. Watch the Weekly digest (e.g. &lt;a href="https://terminalblog.com/blog/coding-agent-weekly-2026-08-03/" rel="noopener noreferrer"&gt;coding agent weekly 2026-08-03&lt;/a&gt;) to see what the agents shipped last cycle.&lt;/p&gt;

&lt;p&gt;&lt;em&gt;Last updated: August 2026.&lt;/em&gt;&lt;/p&gt;

&lt;h2&gt;
  
  
  Related articles
&lt;/h2&gt;

&lt;ul&gt;
&lt;li&gt;&lt;a href="https://terminalblog.com/blog/model-musical-chairs-hn-developers-death-of-ai-loyalty/" rel="noopener noreferrer"&gt;Model Musical Chairs: What 500 Hacker News Comments Reveal About the Death of AI Model Loyalty&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href="https://terminalblog.com/blog/qwen3-8-max-2-4t-autonomous-coding-open-weights/" rel="noopener noreferrer"&gt;Qwen3.8-Max Ships With 2.4T Parameters, 16-Day Autonomous Coding Demo, and Open Weights Coming Next Week&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href="https://terminalblog.com/blog/hn-vibe-coded-tool-flood-backlash/" rel="noopener noreferrer"&gt;What Developers Think About the Vibe-Coded Tool Flood — From 40 HN Comments&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;

</description>
      <category>pillar</category>
      <category>guide</category>
      <category>setup</category>
      <category>howto</category>
    </item>
    <item>
      <title>Meta's Muse Code: A Battery of Persistent Subagents, Replay-Safe Runtime</title>
      <dc:creator>TerminalBlog</dc:creator>
      <pubDate>Thu, 06 Aug 2026 20:40:51 +0000</pubDate>
      <link>https://dev.to/terminalblog/metas-muse-code-a-battery-of-persistent-subagents-replay-safe-runtime-5e3j</link>
      <guid>https://dev.to/terminalblog/metas-muse-code-a-battery-of-persistent-subagents-replay-safe-runtime-5e3j</guid>
      <description>&lt;blockquote&gt;
&lt;p&gt;&lt;em&gt;Originally published at &lt;a href="https://terminalblog.com/blog/meta-muse-code-spark-1-2-persistent-subagents/" rel="noopener noreferrer"&gt;terminalblog.com&lt;/a&gt;.&lt;/em&gt;&lt;/p&gt;
&lt;/blockquote&gt;

&lt;p&gt;Meta released &lt;strong&gt;Muse Code&lt;/strong&gt; (beta) on August 6, 2026: a terminal coding agent powered by the new &lt;strong&gt;Muse Spark 1.2&lt;/strong&gt; model. It is Meta's real entry into the terminal-agent race, and it does not just clone Claude Code. Two design decisions stand out — a battery of &lt;strong&gt;persistent async background agents&lt;/strong&gt; and a &lt;strong&gt;replay-exact, restart-safe event log&lt;/strong&gt; — and they quietly address the two things operators actually complain about with current agents: redundant context gathering and sessions that die on a crash.&lt;/p&gt;

&lt;p&gt;Here is what changed and why it matters if you evaluate or run terminal coding agents.&lt;/p&gt;

&lt;h2&gt;
  
  
  The One-Line Summary
&lt;/h2&gt;

&lt;p&gt;Muse Code runs in the terminal (macOS and Linux), plans changes across large repos, writes code, and validates results — the standard harness job. The differentiator is its runtime architecture rather than any single feature. It coordinates &lt;strong&gt;multiple persistent subagents that stay alive for the whole session&lt;/strong&gt; instead of spawning short-lived ones per task, and it records every model call, tool run, approval, and edit to a &lt;strong&gt;local event log&lt;/strong&gt; that makes the whole run replay-exact and restart-safe.&lt;/p&gt;

&lt;p&gt;Neither idea is brand new in isolation — persistent background agents appeared in OpenCode and Claude Code's recent releases — but Meta's framing treats them as the core design rather than an add-on, and co-trains the model specifically so it behaves best inside this harness.&lt;/p&gt;

&lt;h2&gt;
  
  
  Persistent Background Agents, Not Spawned-On-Demand
&lt;/h2&gt;

&lt;p&gt;Most agents today use a simple "spawn a subagent for this task, get the result, throw it away" cycle. Muse Code inverts that: a set of &lt;strong&gt;async background agents remain active throughout the session&lt;/strong&gt;, rather than being created for individual tasks.&lt;/p&gt;

&lt;p&gt;Why this matters in practice:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;
&lt;strong&gt;Less redundant information gathering.&lt;/strong&gt; A fresh subagent re-reads the codebase to build context from scratch every time. A persistent agent already holds that context, so multi-step tasks spend fewer tokens and less wall-clock time locating what they need.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Less steering.&lt;/strong&gt; The background agents decide when to communicate back to the main agent instead of dumping every intermediate step on you. On a long refactor, that keeps your terminal quiet until there is a decision that actually needs a human.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Mixed latency.&lt;/strong&gt; Because the subagents are already warm, follow-up steps on multi-step work start immediately rather than after a full context-reload.&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;The default skills ship with the pattern baked in. &lt;code&gt;/plan&lt;/code&gt; turns a task into an approval-gated plan, &lt;code&gt;/grill&lt;/code&gt; stress-tests that plan until it holds up, and &lt;code&gt;/goal&lt;/code&gt; drives work toward a completed objective. Translated: plan, pressure-test the plan, then execute toward the finish line — a workflow that benefits exactly from having a record that the same agents can act on.&lt;/p&gt;

&lt;p&gt;For a quick primer: if you have used Claude Code's &lt;code&gt;--background-subagents&lt;/code&gt; or OpenCode's orchestration, you already have the mental model. Muse Code just makes persistent agents the default locomotion instead of an opt-in performance feature.&lt;/p&gt;

&lt;h2&gt;
  
  
  Replay-Exact, Restart-Safe Runtime
&lt;/h2&gt;

&lt;p&gt;The second big change is quieter but maybe more important for long-running work. Muse Code keeps a &lt;strong&gt;local event log&lt;/strong&gt; to which every model call, tool run, approval, and edit is appended. One file becomes the single source of truth for the session.&lt;/p&gt;

&lt;p&gt;The consequence is that the runtime is &lt;strong&gt;replay-exact and restart-safe&lt;/strong&gt;: if the process crashes, the agent can resume precisely where it stopped instead of losing the thread and silently derailing. For anyone who has lost hours to a 2-hour session that corrupted on a network blip or a closed lid, this is the feature set you actually wanted — checkpointing without manual orchestration.&lt;/p&gt;

&lt;p&gt;This pairs naturally with the company's marketing of the &lt;em&gt;same&lt;/em&gt; model + harness. Contrast with a generic agent that has no durable event log: a crash means the next run re-reads context and re-builds everything, burning tokens and losing decisions. With a restart-safe log, long-horizon tasks survive interruptions without you babysitting retries.&lt;/p&gt;

&lt;h2&gt;
  
  
  Spark 1.2 Was Co-Trained With Muse Code
&lt;/h2&gt;

&lt;p&gt;Muse Spark 1.2 is a coding-focused update to the mid-2026 Spark 1.1 line, with gains in code generation, complex debugging, codebase understanding, and end-to-end workflows. The pricing framing readers saw in Meta's earlier Spark 1.1 API story (aggressively cheap inference) still applies to the model family story, but the model alone is only half the release here.&lt;/p&gt;

&lt;p&gt;The important coordination: &lt;strong&gt;Muse Spark 1.2 was co-trained with Muse Code&lt;/strong&gt; using rejection-sampled harness trajectories and recipe optimizations for goal conditioning, compaction, and subagent use, plus integration of the Muse Code toolset to maximize harness compatibility. In plain terms, the training objective bakes in behavior designed for the &lt;em&gt;specific&lt;/em&gt; persistent-subagent, event-log harness — not just "give good code," but "give good code that works well through Muse Code's long-horizon loop." If you evaluate the model on a raw browser bench, you will miss the point of the co-training.&lt;/p&gt;

&lt;p&gt;Two training directions worth noting:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;
&lt;strong&gt;Long-horizon training.&lt;/strong&gt; Spark 1.2 was trained on whole-repository generation, large end-to-end projects, and auto-research, using planning to sequence work, goal conditioning to hold direction, and context compaction to retain knowledge across long runs.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;A self-improvement loop.&lt;/strong&gt; The team used Spark 1.1 to generate challenge environments and templates, then had it grade candidate solutions, producing a scalable training set for 1.2. That loop is why the model handles concrete long-horizon follow-through.&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;The case study in the release is a GPU-KDA kernel optimization run of 1,000+ tool calls (up to 24 hours), writing, compiling, profiling, and improving over baseline. The agent held a multi-hour, multi-thousand-call loop and kept improving — emblematic of what the persistent, replay-safe runtime is for.&lt;/p&gt;

&lt;h2&gt;
  
  
  What It Means for the Terminal Coder
&lt;/h2&gt;

&lt;p&gt;Three practical takeaways for operators and evaluators:&lt;/p&gt;

&lt;ol&gt;
&lt;li&gt;
&lt;strong&gt;Context costs less.&lt;/strong&gt; If your pain is agents re-reading your repo every few minutes, the persistent subagent pattern directly targets that. It is worth benchmarking Muse Code against your current default specifically on a task that requires the second and third follow-up edits to a large file, where context is the bottleneck.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Sessions are safer.&lt;/strong&gt; The replay-exact log means a crash does not nuke the work. Since long multi-hour runs are the organic habitat for this class of task, that is a real advantage even if nothing else sways you.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;The frontier is now model-plus-harness.&lt;/strong&gt; Whereas 2025 treated "the best model" as almost the whole story, 2026 is increasingly co-training the model to live inside a specific harness — Muse does this with Spark 1.2. Evaluation now has to benchmark the coupling, not the model on the bench or the harness in a vacuum. That is the deeper takeaway this release anchors.&lt;/li&gt;
&lt;/ol&gt;

&lt;p&gt;Watch the builder: make the model and harness a matched flagship pair, and the lock-in argument shifts from "my model is smart" to "my harness understands my model." Muse Code is a round stake in that camp.&lt;/p&gt;

&lt;h2&gt;
  
  
  The Watch List
&lt;/h2&gt;

&lt;p&gt;Three things to verify before the beta earns a slot in a serious stack:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;
&lt;strong&gt;Platform.&lt;/strong&gt; Muse Code's installer targets macOS and Linux on day one. Windows users are out until there is a native path — same gap several terminal agents spent 2026 closing.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Model access and cost.&lt;/strong&gt; Spark 1.2 is available in Muse Code and in the Meta Model API. If the earlier Spark 1.1 API pricing story holds as a pattern, expect the cheap-inference position to carry over — but confirm the Muse Code access tier yourself rather than assuming it.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;It is a co-trained beta, not a dashboard.&lt;/strong&gt; The interesting parts of this release are architectural (persistent agents, replay-exact logs) and hold up on a disposable repo you are happy to churn. Test it with approval-gated plan mode first, in a throwaway clone, before pointing it at a repo your livelihood depends on. Early betas earning trust is how a terminal agent gets adopted; Muse is still in the earning phase.&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;The signal worth taking away is directional. Terminal agents are converging on two things: warm persistent context instead of per-task context reloads, and durable run state instead of sessions that die. Muse Code ships both as defaults, not add-ons — that is a genuine step, even at beta quality, in the direction the whole category is already marching.&lt;/p&gt;




</description>
      <category>meta</category>
      <category>musecode</category>
      <category>spark</category>
      <category>codingagents</category>
    </item>
    <item>
      <title>What Developers Think About the Vibe-Coded Tool Flood — From 40 HN Comments</title>
      <dc:creator>TerminalBlog</dc:creator>
      <pubDate>Thu, 06 Aug 2026 20:40:05 +0000</pubDate>
      <link>https://dev.to/terminalblog/what-developers-think-about-the-vibe-coded-tool-flood-from-40-hn-comments-1gid</link>
      <guid>https://dev.to/terminalblog/what-developers-think-about-the-vibe-coded-tool-flood-from-40-hn-comments-1gid</guid>
      <description>&lt;blockquote&gt;
&lt;p&gt;&lt;em&gt;Originally published at &lt;a href="https://terminalblog.com/blog/hn-vibe-coded-tool-flood-backlash/" rel="noopener noreferrer"&gt;terminalblog.com&lt;/a&gt;.&lt;/em&gt;&lt;/p&gt;
&lt;/blockquote&gt;

&lt;p&gt;If you follow Hacker News, you have seen the pattern: a coding agent ships something, someone builds a small wrapper around it — a session manager, a security scanner, a debugging helper — and the &lt;code&gt;Show HN&lt;/code&gt; post arrives half an hour later. A year ago this felt like momentum. This week, developers pushed back hard, and the argument has a lot to teach anyone who uses AI coding tools.&lt;/p&gt;

&lt;p&gt;Over the past few days, several small threads about coding-agent utilities — terminal session managers, open-source security scanners, read-only production debuggers — crisscrossed into a single, unusually candid argument about what these tools, and their authors, have become. The loudest take, repeated across threads in different words: with AI writing the code, a working repo is no longer proof of quality, and the front page is filling up with "vibe-coded" projects nobody is willing to maintain.&lt;/p&gt;

&lt;p&gt;Here is exactly what everyone argued, who was right, and what it means if you rely on AI agents for your own work.&lt;/p&gt;

&lt;h2&gt;
  
  
  Context first (for anyone new here)
&lt;/h2&gt;

&lt;p&gt;Two terms matter. &lt;strong&gt;Vibe coding&lt;/strong&gt; is when you tell an AI agent what you want in plain English and let it generate most of the code — you review and adjust the result, but the agent does the heavy lifting. It is the fastest way to build a small utility that exists by the evening.&lt;/p&gt;

&lt;p&gt;Now, the week on HN. Someone posted &lt;strong&gt;Wallfacer&lt;/strong&gt;, a terminal "session manager for Claude Code" that lets you search and resume old agent sessions. Someone else posted &lt;strong&gt;Ship Safe&lt;/strong&gt;, an open-source scanner that reviews what a coding agent is about to change in your repo. A third team launched &lt;strong&gt;HyperProbe&lt;/strong&gt;, agents that attach read-only "probes" to a running service to inspect variables during production debugging. Individually, all three are useful. None of them is large, enterprise software — each is the kind of thing one person could knock out quickly with an agent.&lt;/p&gt;

&lt;p&gt;The reactions under these posts were not the generous praise you might expect. They were a two-sided argument about whether these posts are valuable open-source collaboration or the software equivalent of an influencer posting a photo of their lunch.&lt;/p&gt;

&lt;h2&gt;
  
  
  Reaction 1: "Code is no longer effort"
&lt;/h2&gt;

&lt;p&gt;The most repeated sentiment was that the old way developers evaluated an open source project broke. In the past, a working, well-structured repository was the main proof of competence. Commenters argued that equation died the moment AI models can write all of that code.&lt;/p&gt;

&lt;p&gt;One developer, paraphrased: &lt;em&gt;"In a world where code is cheap, code no longer equals effort. What I look at now are signals you cannot fake: consistency, attention to detail, long-term support, genuine community engagement. Until I see those, a new repo is just noise."&lt;/em&gt;&lt;/p&gt;

&lt;p&gt;That is worth stopping on. It means experienced developers no longer scan a screenshot or a slick README and conclude "this is good software." They have started treating code alone as close to a red flag, and instead weighing whether the person behind it stayed around, answered issues, and kept the thing alive.&lt;/p&gt;

&lt;h2&gt;
  
  
  Reaction 2: "Every new tool is something I could build myself"
&lt;/h2&gt;

&lt;p&gt;The strongest rejection came from a developer who framed the whole situation against the broader state of 2026:&lt;/p&gt;

&lt;p&gt;&lt;em&gt;"Why should I adopt someone's vibe-coded tool when I can vibe-code my own, tailored exactly to my use case, in under a day? I will never vibe-code the things I actually depend on — I do not want to maintain my own Kubernetes fork, and I happily pay for enterprise software. But these small end-user console apps are just noise. Posting it on Hacker News is the software developer equivalent of an influencer posting a picture of their lunch."&lt;/em&gt;&lt;/p&gt;

&lt;p&gt;That last line got a lot of traction. The core point is practical: the tools themselves are now trivial to reproduce, because the hard work no longer lives in the code. What a developer needs to trust lives around the code — correctness, durability, and a person who will maintain it for years rather than abandon it after launch week.&lt;/p&gt;

&lt;h2&gt;
  
  
  Reaction 3: The rebuttals — "this is the upside"
&lt;/h2&gt;

&lt;p&gt;It was not a doom-and-gloom thread. Several developers pushed back with a more optimistic read.&lt;/p&gt;

&lt;p&gt;One noted: &lt;em&gt;"I built a tool to manage my multiple agent swarms across Claude Code, Codex, and OpenCode — with conversation queuing and team sharing — and it took me the better part of a day. It is now deeply woven into how we work. This is the upside of the current world."&lt;/em&gt; The point: the same cheap code that produces "noise" can also supercharge your own team via correctly scoped internal tools — no public release required.&lt;/p&gt;

&lt;p&gt;A different, free-software flavor of the rebuttal arrived when one user asked whether all this was simply the open-source dream — "fork it and make it your own." The reply: &lt;em&gt;"That reduces open source to free beer, not free speech. Open source was always about a collaborative engineering process — we bet on the system together. What we have done now is reduce it to modern individualism, where everyone ships a private throwaway fork and nobody holds the community."&lt;/em&gt;&lt;/p&gt;

&lt;p&gt;That exchange is arguably the heart of it all. Cheap code has made it easier than ever for one person to build something that works. But it has also made it easier for everyone to build and ignore, so the shared, maintained, sustainable layer that "open source" used to mean is thinning out.&lt;/p&gt;

&lt;h2&gt;
  
  
  Real insight: trust has moved out of the code
&lt;/h2&gt;

&lt;p&gt;Step back and the recurring threads merge into one finding. Developers are not angry that AI can write code. They are angry that &lt;strong&gt;the thing they used to judge quality by — the code itself — is now free, so low-effort projects that would never win a maintainer survive anyway.&lt;/strong&gt; The only signals now capable of separating "worth using" from "surely not even worth a star" live entirely outside the code: who maintains it, how long they stick around, and whether the tool solves a problem nobody already solved with better care. A new "AI specialist" appearing every week is being met with boredom.&lt;/p&gt;

&lt;p&gt;This is not a niche complaint. One commenter framed it in volume terms: &lt;em&gt;"Everybody can be a coder now — coding is the new crypto or NFT rush. GitHub added tens of thousands of new people last year, with hundreds of thousands of new repositories every day. I have stopped pre-sorting and decided to let the crowd and the maintenance record decide what is useful."&lt;/em&gt;&lt;/p&gt;

&lt;h2&gt;
  
  
  What it means for you
&lt;/h2&gt;

&lt;p&gt;If you use coding agents day to day, this argument lands somewhere uncomfortable — and useful.&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;&lt;p&gt;&lt;strong&gt;Having code quickly is only a small step.&lt;/strong&gt; Whether you build your own helper or pull in one of the tools posted on HN, the deliverable is whatever happens after the first working version: shipping, testing, fixing, and maintaining. That part cannot be vibe-coded, and it is exactly where most of these projects quietly die.&lt;/p&gt;&lt;/li&gt;
&lt;li&gt;&lt;p&gt;&lt;strong&gt;Your own "slop" has a place — internally.&lt;/strong&gt; Half of these threads happily pointed out the real win: building internal, scoped tools tailored to how your team already works, in hours, is one of the best things about the agent era. Do it — just keep them internal and focused, and drop the expectation that they belong on a front page.&lt;/p&gt;&lt;/li&gt;
&lt;li&gt;&lt;p&gt;&lt;strong&gt;Trust maintainers, not screenshots.&lt;/strong&gt; The most practical guidance in these threads is simple: choose agent tooling on metrics of durability — commit history, open issues, how long the authors has been keeping the repo alive — over how polished the page looks. In 2026 a beautiful "agent-built" page is cheap; a repo that is still genuinely supported a year later is the real signal.&lt;/p&gt;&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;&lt;strong&gt;Bottom line.&lt;/strong&gt; Coding agents are doing something nobody quite expected: they made the code itself trivial, and in doing so they shifted where credibility lives. The "vibe-coded slop" complaint you read on HN is really a signal about the world we are in now — everyone can build, so the only thing that separates a hobby from a product is whether someone keeps you the engine running. If you know the code is now cheap, you are hours ahead of the people who are still measuring quality by line count.&lt;/p&gt;

&lt;p&gt;The right way to use this moment is not to worry about the flood. It is to realize that the quality you used to hide inside your code now has to live literally everywhere around it.&lt;/p&gt;

</description>
      <category>opinion</category>
      <category>hackernews</category>
      <category>codingagents</category>
      <category>opensource</category>
    </item>
    <item>
      <title>AWS Kiro Crew: Turning AI Coding Agents Into Autonomous Engineering Teams</title>
      <dc:creator>TerminalBlog</dc:creator>
      <pubDate>Thu, 06 Aug 2026 20:40:01 +0000</pubDate>
      <link>https://dev.to/terminalblog/aws-kiro-crew-turning-ai-coding-agents-into-autonomous-engineering-teams-2kkk</link>
      <guid>https://dev.to/terminalblog/aws-kiro-crew-turning-ai-coding-agents-into-autonomous-engineering-teams-2kkk</guid>
      <description>&lt;blockquote&gt;
&lt;p&gt;&lt;em&gt;Originally published at &lt;a href="https://terminalblog.com/blog/aws-kiro-crew-autonomous-engineering-teams/" rel="noopener noreferrer"&gt;terminalblog.com&lt;/a&gt;.&lt;/em&gt;&lt;/p&gt;
&lt;/blockquote&gt;

&lt;p&gt;AWS just made its biggest bet yet on autonomous engineering. On August 4, 2026, the company released &lt;strong&gt;Kiro Crew&lt;/strong&gt;, an open-source orchestration platform designed to turn interactive coding assistants into long-running, self-managing engineering teams. It is not another AI coding agent. It is the layer &lt;em&gt;around&lt;/em&gt; agents — the thing that coordinates them, remembers context across sessions, schedules their work, and gates what they're allowed to touch.&lt;/p&gt;

&lt;p&gt;For anyone running coding agents in 2026 — not just tinkering with them — this is worth understanding. Kiro Crew is one of the first mainstream attempts to answer a question the industry has been circling all year: once an agent can reliably finish a single task, how do you make a &lt;em&gt;team&lt;/em&gt; of them finish a week of work while you sleep?&lt;/p&gt;

&lt;h2&gt;
  
  
  What Kiro Crew actually is
&lt;/h2&gt;

&lt;p&gt;Kiro Crew was born inside Amazon as an internal project called &lt;strong&gt;MeshClaw&lt;/strong&gt; — the sort of tool Amazon builders often build quietly and never ship. This one got out of the building: more than 39,000 Amazon engineers adopted it in under six months before AWS decided to open-source it. That internal track record is the strongest signal the project has, and it's worth weighing against the marketing.&lt;/p&gt;

&lt;p&gt;As launched, Kiro Crew is an application layer built to sit on top of existing coding agents. Its job is to make work &lt;em&gt;bigger than a single task in a single session&lt;/em&gt; actually happen. Instead of an agent that does one thing then stops, you get an always-on workspace that can:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;
&lt;strong&gt;Coordinate multiple agents&lt;/strong&gt; working on the same repositories and workflows.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Keep persistent memory&lt;/strong&gt; across sessions, so the context you built last week isn't lost today.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Schedule recurring work&lt;/strong&gt; — dependency upgrades, flaky test cleanup, framework migrations that run over hours.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Connect to developer tooling&lt;/strong&gt; to investigate incidents, monitor pull requests, and triage issue queues.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Gate everything&lt;/strong&gt; behind human approval workflows and security controls, and log what ran with signed audit logs.&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;You manage it through a web and desktop dashboard, so the agents keep running while you're in meetings, off the clock, or asleep. Developers return to completed progress rather than a stalled process.&lt;/p&gt;

&lt;h2&gt;
  
  
  How it's different from just another agent
&lt;/h2&gt;

&lt;p&gt;The key distinction is that Kiro Crew is an &lt;strong&gt;orchestrator&lt;/strong&gt;, not a model or a single agent. The model is a commodity. The harness — the coordination layer — is where the leverage moved in 2026. That's exactly what Kiro Crew monetizes conceptually, except it's free and open source.&lt;/p&gt;

&lt;p&gt;Three architectural choices set it apart:&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;1. Persistent memory across sessions.&lt;/strong&gt; A long-running engineering task isn't one prompt. It's a chain of investigations, decisions, and fixes that span days. Kiro Crew ships persistent memory as a first-class feature so an agent can resume where it left off instead of re-deriving everything from scratch.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;2. Built on open standards — with a catch.&lt;/strong&gt; The platform is built around two open protocols: Agent Client Protocol (ACP) and Model Context Protocol (MCP). That means it's designed to interoperate with the broader agent ecosystem. &lt;em&gt;However&lt;/em&gt;, at launch Kiro Crew runs on the &lt;strong&gt;proprietary Kiro CLI&lt;/strong&gt;, which is metered by credits. As one analyst put it bluntly in coverage: until someone runs a different agent under Crew and shows it working, "the open part stops at the orchestration layer." Claude Code, Codex, and Devin users may need to build and validate their own connectors before Kiro Crew can drive them.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;3. Deploy it where you want.&lt;/strong&gt; Kiro Crew runs entirely inside your environment — laptops, containers, or virtual machines — with &lt;strong&gt;no AWS account and no AWS-managed control plane required&lt;/strong&gt;. For enterprises that care about where their agent traffic lives, that's a real feature: code and credentials can stay inside your own perimeter rather than going to a black-box.&lt;/p&gt;

&lt;p&gt;The project is governed openly — a publicly listed steering committee, with proposals submitted as pull requests and debated in the open, following the same open governance model AWS used for OpenSearch and other OSS projects.&lt;/p&gt;

&lt;h2&gt;
  
  
  The reference apps set the shape
&lt;/h2&gt;

&lt;p&gt;To make it concrete, AWS is launching three reference applications built on top of Kiro Crew:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;
&lt;strong&gt;DevFleets&lt;/strong&gt; — worktree management, so multiple agent workers can operate on parallel copies of a repository without colliding.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Issue Radar&lt;/strong&gt; — issue and pull-request triage, turning an agent into a first-pass filter for a growing ticket queue.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Task Runner&lt;/strong&gt; — executing long-running engineering tasks that need checkpoints and retries.&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;These aren't standalone products. They're purpose-built UIs bolted onto Kiro Crew's orchestration engine, and AWS expects to ship more of them over time. The pattern matters more than any single app: AWS is betting that the winning model is not one bloated all-in-one agent, but a thin coordination layer plus specialized agents and tools wired into it.&lt;/p&gt;

&lt;h2&gt;
  
  
  Where it fits (and where it doesn't)
&lt;/h2&gt;

&lt;p&gt;The strongest use cases, per the analyst reaction, are platform engineering, DevOps, and SRE — the work that's repetitive and long-running rather than novel. Dependency upgrades, framework migrations, flaky test cleanup, first-pass incident investigation, ticket triage. These are exactly the tasks that make sense to run asynchronously with checkpoints and retries, unbothered over hours.&lt;/p&gt;

&lt;p&gt;Where it's weaker today: greenfield SaaS-style product engineering, and any workflow that depends on a specific agent's custom behaviors outside the Kiro CLI. And it's an honest trade-off that most enterprises are not operationally ready to manage a swarm of autonomous agents. Parallel agents multiply model calls, compute, CI activity, API usage, and tool access — not just token spend. Before you let persistent agents loose on a source repo, you need real policy around least-privilege access, human overrides, memory retention, code provenance, and audit trails.&lt;/p&gt;

&lt;h2&gt;
  
  
  Is it worth adopting?
&lt;/h2&gt;

&lt;p&gt;Kiro Crew is free, open source, and self-hostable, which dramatically lowers the barrier to evaluating it. You pay only for the agents and tools you connect to it. For a team already running Kiro's IDE, adoption is expected to be smooth — it reuses existing &lt;code&gt;.kiro&lt;/code&gt; configurations, steering files, skills, and custom agents without extra setup.&lt;/p&gt;

&lt;p&gt;For everyone else, treat it as a pilot, not a drop-in replacement. Stand it up in a dev environment, wire it to one real workflow you already run, and measure two things: whether it actually reduces human babysitting, and whether the governance and audit features hold up under real least-privilege pressure. The 39,000-engineer internal adoption is genuinely encouraging. The proprietary-CLI caveat on a supposedly open platform is the honest reason to stay skeptical until you've watched it drive &lt;em&gt;your&lt;/em&gt; toolchain, not AWS's.&lt;/p&gt;

&lt;p&gt;The bigger takeaway is direction: the market is consolidating around the idea that orchestration and governance — not raw model quality — are the real bottleneck in agentic coding. AWS now has an entry in that race, and because it's open source and championed by a hyperscaler, it's going to set the bar for everyone else. In this space, that alone makes it worth watching.&lt;/p&gt;

&lt;p&gt;If you already run coding agents in production and you're thinking about moving from "agents as assistants" to "agents as a team," Kiro Crew is one of the most credible open-source starting points available right now.&lt;/p&gt;

</description>
      <category>aws</category>
      <category>kiro</category>
      <category>orchestration</category>
      <category>multiagent</category>
    </item>
    <item>
      <title>Cline Desktop Launches with Free Coding Models — Zero API Keys Required</title>
      <dc:creator>TerminalBlog</dc:creator>
      <pubDate>Sun, 02 Aug 2026 04:33:27 +0000</pubDate>
      <link>https://dev.to/terminalblog/cline-desktop-launches-with-free-coding-models-zero-api-keys-required-f7h</link>
      <guid>https://dev.to/terminalblog/cline-desktop-launches-with-free-coding-models-zero-api-keys-required-f7h</guid>
      <description>&lt;blockquote&gt;
&lt;p&gt;&lt;em&gt;Originally published at &lt;a href="https://terminalblog.com/blog/cline-desktop-free-coding-models-zero-api-keys/" rel="noopener noreferrer"&gt;terminalblog.com&lt;/a&gt;.&lt;/em&gt;&lt;/p&gt;
&lt;/blockquote&gt;

&lt;p&gt;Cline — the 61,000-star open-source coding agent — just made two moves that lower the barrier to entry for AI-assisted coding. First, it shipped a standalone macOS desktop app (Cline Desktop v0.0.7) that runs agent sessions independently of any IDE. Second, it added free coding models to every Cline surface: the desktop app, the VS Code extension, and the command-line interface. You no longer need an API key to try Cline.&lt;/p&gt;

&lt;p&gt;If you have been curious about coding agents but hesitated because of billing setup or vendor lock-in, this is the week to try one.&lt;/p&gt;

&lt;h2&gt;
  
  
  What Is Cline Desktop?
&lt;/h2&gt;

&lt;p&gt;Cline started as a VS Code extension called "Claude Dev." It grew into a CLI, a JetBrains plugin, an SDK, and now a desktop app. The VS Code extension still works — Cline Desktop does not replace it. Instead, it gives you a native macOS application for running and monitoring agent sessions outside of your editor.&lt;/p&gt;

&lt;p&gt;The first public release was Desktop v0.0.4 on July 22, 2026. By July 29, it had reached v0.0.7 with rapid iteration on feedback. The app is signed and notarized for Apple Silicon and Intel Macs. You download a DMG once from GitHub Releases, and the app handles future updates automatically — checking on launch and every two hours in the background.&lt;/p&gt;

&lt;p&gt;For beginners: think of Cline Desktop as a control center for your coding agent. You can start a session, watch the agent work, review its changes, and manage multiple parallel sessions — all without having VS Code open.&lt;/p&gt;

&lt;h2&gt;
  
  
  Free Coding Models: No API Key, No Billing
&lt;/h2&gt;

&lt;p&gt;The headline feature across all Cline surfaces is free models. When you open the model picker in Cline Desktop, the VS Code extension, or the CLI, you now see certain models marked with a "(free)" label. These are models that Cline provides without requiring an API key or any payment.&lt;/p&gt;

&lt;p&gt;You select a free model, ask the agent to do something — read a file, explain a function, write a test — and it works. The agent loop is identical to what you get with paid models: it reads your codebase, plans its approach, executes tool calls, and shows you the results.&lt;/p&gt;

&lt;p&gt;The free tier has usage limits. When you hit one, Cline shows a dedicated error card with two pieces of information: you have reached the free-tier limit, and the exact time the limit resets. This is a much better experience than the vague "rate limit exceeded" messages that some other tools display. You know when you can try again, and you do not need to guess whether the problem is your setup or a temporary restriction.&lt;/p&gt;

&lt;p&gt;For beginners, this means you can try Cline without:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Setting up an Anthropic, OpenAI, or OpenRouter account&lt;/li&gt;
&lt;li&gt;Entering a credit card&lt;/li&gt;
&lt;li&gt;Configuring billing alerts&lt;/li&gt;
&lt;li&gt;Worrying about surprise costs&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;Pick a free model, ask the agent to do something, and see how it works. If you later decide you want faster inference or access to more capable models like Claude Sonnet or GPT-5, you can switch to a paid provider at any time.&lt;/p&gt;

&lt;h2&gt;
  
  
  What the Desktop App Can Do
&lt;/h2&gt;

&lt;p&gt;Cline Desktop v0.0.7 ships with several features that the VS Code extension does not offer:&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;System tray with session status.&lt;/strong&gt; The app adds a system tray icon showing how many agent sessions are currently running. You get at-a-glance visibility without switching windows.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Session history with pagination.&lt;/strong&gt; Your session history is paginated in ten-session pages, with older sessions loaded on demand. You can favorite sessions, and they are sorted by most recent activity with consistent status indicators across views.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Subagent and teammate visualization.&lt;/strong&gt; When a Cline session spawns subagents — specialized assistants that handle specific tasks like testing or code review — those runs now appear in the desktop app with their status and results. You can see what each subagent did without digging through logs.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Workspace-free chat.&lt;/strong&gt; You do not need to open a project folder to start chatting. The app supports workspace-free sessions for quick questions, exploration, or learning. Open the app, type a question, and get an answer.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;File drag-and-drop.&lt;/strong&gt; Drag files directly onto the chat to attach them. The agent reads the file content and incorporates it into the conversation. Images display inline in the chat transcript.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Queued messages.&lt;/strong&gt; When the agent is busy processing a turn, you can queue additional messages. They appear in a collapsible list above the composer with a count. You can edit, send immediately, or delete individual queued turns.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;One-time routines.&lt;/strong&gt; In addition to recurring schedules, you can now schedule one-time routines — tasks that run once at a specific time and then are done. The app navigates you to the routine's run so you can check the results.&lt;/p&gt;

&lt;h2&gt;
  
  
  Agentic Compaction as the Default
&lt;/h2&gt;

&lt;p&gt;One change that affects all Cline users: agentic compaction is now the default context-compaction strategy. When a long conversation exceeds the model's context window, Cline needs to summarize earlier messages to make room. The old "basic" strategy truncated messages at fixed points, often losing important context. Agentic compaction uses the model itself to generate a structured summary that preserves decisions, file paths, and task state.&lt;/p&gt;

&lt;p&gt;This matters because long coding sessions — the kind where you are iterating on a feature over an hour or more — previously lost coherence after context compaction. With agentic compaction, the agent remembers what it did, what it decided, and what remains to be done.&lt;/p&gt;

&lt;p&gt;The CLI (v3.0.47) and the VS Code extension (v4.0.11) also default to agentic compaction. If you are using an older version of Cline, updating gets you this improvement automatically.&lt;/p&gt;

&lt;h2&gt;
  
  
  How to Get Started
&lt;/h2&gt;

&lt;p&gt;&lt;strong&gt;Desktop app:&lt;/strong&gt; Download the DMG from the &lt;a href="https://github.com/cline/cline/releases" rel="noopener noreferrer"&gt;Cline GitHub Releases page&lt;/a&gt;. Open it, and the app installs. Future updates arrive automatically.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;VS Code extension:&lt;/strong&gt; Open the Extensions panel in VS Code, search for "Cline," and install or update. Free models appear in the model picker after updating.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;CLI:&lt;/strong&gt; Install with your package manager. The CLI shares the same agent core as the desktop app and extension, so free models, agentic compaction, and all other features work identically.&lt;/p&gt;

&lt;p&gt;In all three cases, open the model picker and look for models labeled "(free)." Select one and start coding. No configuration changes are needed.&lt;/p&gt;

&lt;h2&gt;
  
  
  Should You Care?
&lt;/h2&gt;

&lt;p&gt;If you are evaluating coding agents, Cline's free tier removes the biggest friction point: cost. You can now compare Cline's agent loop — how it plans, executes, and recovers from errors — against Claude Code, Codex, Goose, or Kilo Code without spending a dollar.&lt;/p&gt;

&lt;p&gt;If you are already a Cline user, the desktop app adds observability. Watching subagents work, managing queued messages, and monitoring sessions from the system tray are small quality-of-life improvements that add up over a full workday.&lt;/p&gt;

&lt;p&gt;If you have never tried a coding agent at all, Cline's free models are the lowest-risk way to start. The models will not match the speed or capability of premium options like Claude Opus 5 for complex multi-file refactors. But for reading code, answering questions, writing tests, and making small edits, they are more than enough — and the price is hard to beat.&lt;/p&gt;

</description>
      <category>cline</category>
      <category>desktop</category>
      <category>freemodels</category>
      <category>release</category>
    </item>
    <item>
      <title>Grok Build: xAI Open-Sources Coding Agent After Repo Upload Scandal</title>
      <dc:creator>TerminalBlog</dc:creator>
      <pubDate>Sun, 02 Aug 2026 04:32:40 +0000</pubDate>
      <link>https://dev.to/terminalblog/grok-build-xai-open-sources-coding-agent-after-repo-upload-scandal-14ec</link>
      <guid>https://dev.to/terminalblog/grok-build-xai-open-sources-coding-agent-after-repo-upload-scandal-14ec</guid>
      <description>&lt;blockquote&gt;
&lt;p&gt;&lt;em&gt;Originally published at &lt;a href="https://terminalblog.com/blog/grok-build-xai-coding-agent-17k-stars/" rel="noopener noreferrer"&gt;terminalblog.com&lt;/a&gt;.&lt;/em&gt;&lt;/p&gt;
&lt;/blockquote&gt;

&lt;p&gt;xAI's &lt;strong&gt;Grok Build&lt;/strong&gt; coding agent went from 17K GitHub stars to one of the biggest coding agent security stories of 2026 — in three days. On July 12, a security researcher caught Grok Build silently uploading entire Git repositories (full commit history, deleted credentials, files the AI never touched) to a Google Cloud Storage bucket. By July 15, xAI had open-sourced the entire agent harness under Apache 2.0.&lt;/p&gt;

&lt;p&gt;This is the full timeline, what was exposed, and what to do if you ran Grok Build before July 13.&lt;/p&gt;

&lt;h2&gt;
  
  
  What Happened: The 72-Hour Timeline
&lt;/h2&gt;

&lt;div class="table-wrapper-paragraph"&gt;&lt;table&gt;
&lt;thead&gt;
&lt;tr&gt;
&lt;th&gt;Date&lt;/th&gt;
&lt;th&gt;Event&lt;/th&gt;
&lt;/tr&gt;
&lt;/thead&gt;
&lt;tbody&gt;
&lt;tr&gt;
&lt;td&gt;&lt;strong&gt;July 12&lt;/strong&gt;&lt;/td&gt;
&lt;td&gt;Security researcher cereblab publishes wire-level analysis of Grok Build CLI v0.2.93&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;&lt;strong&gt;July 13&lt;/strong&gt;&lt;/td&gt;
&lt;td&gt;xAI silently disables repo uploads via server-side flag&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;&lt;strong&gt;July 14&lt;/strong&gt;&lt;/td&gt;
&lt;td&gt;xAI responds publicly, points users to &lt;code&gt;/privacy&lt;/code&gt; command&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;&lt;strong&gt;July 15&lt;/strong&gt;&lt;/td&gt;
&lt;td&gt;xAI publishes 844,530 lines of Rust under Apache 2.0 on GitHub&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;&lt;strong&gt;July 16&lt;/strong&gt;&lt;/td&gt;
&lt;td&gt;Repository accumulates 4,400+ stars and 655 forks within 48 hours&lt;/td&gt;
&lt;/tr&gt;
&lt;/tbody&gt;
&lt;/table&gt;&lt;/div&gt;

&lt;p&gt;The speed of the open-source release — hours after the crisis peaked — suggests it was either in progress or a deliberate response. Either way, it changed the trajectory of the incident from "cover-up" to "accountability."&lt;/p&gt;

&lt;h2&gt;
  
  
  What Was Actually Being Uploaded
&lt;/h2&gt;

&lt;p&gt;The researcher routed Grok Build through mitmproxy and watched two simultaneous network channels fire on every session:&lt;/p&gt;

&lt;ol&gt;
&lt;li&gt;
&lt;strong&gt;Channel A&lt;/strong&gt; (&lt;code&gt;POST /v1/responses&lt;/code&gt;): ~192 KB of actual task content — the code the model needed to do its job.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Channel B&lt;/strong&gt; (&lt;code&gt;POST /v1/storage&lt;/code&gt;): &lt;strong&gt;5.10 GiB&lt;/strong&gt; across 73 chunks to &lt;code&gt;gs://grok-code-session-traces/&lt;/code&gt;.&lt;/li&gt;
&lt;/ol&gt;

&lt;p&gt;That is a &lt;strong&gt;27,800× ratio&lt;/strong&gt; between what the coding task required and what xAI's servers received.&lt;/p&gt;

&lt;p&gt;The upload was a &lt;strong&gt;Git bundle&lt;/strong&gt; — a single file containing every tracked file plus the repository's complete commit history. To prove the scope, the researcher planted a canary file at &lt;code&gt;src/_probe/never_read_canary.txt&lt;/code&gt; and instructed Grok Build never to open it. The agent complied, replying "OK." But the canary file appeared in the captured bundle anyway — along with months of commit history, &lt;code&gt;.env&lt;/code&gt; files with API keys, and every other tracked file.&lt;/p&gt;

&lt;p&gt;The test was replicated on a second, unrelated codebase with identical results.&lt;/p&gt;

&lt;h2&gt;
  
  
  The Privacy Toggle That Did Nothing
&lt;/h2&gt;

&lt;p&gt;Grok Build had a visible &lt;strong&gt;"Improve the model"&lt;/strong&gt; setting — the standard opt-out that developers reasonably assumed controlled data collection. &lt;strong&gt;It did not stop the upload.&lt;/strong&gt;&lt;/p&gt;

&lt;p&gt;The upload was controlled by a completely separate, invisible server-side flag: &lt;code&gt;disable_codebase_upload: true&lt;/code&gt;. xAI flipped that flag on July 13, and uploads stopped — no client update required. Which also means no client update is required to re-enable them.&lt;/p&gt;

&lt;p&gt;The &lt;code&gt;/privacy&lt;/code&gt; CLI command that xAI pointed users to after the incident is a &lt;strong&gt;retention toggle&lt;/strong&gt; — it governs whether transmitted data is used for model training. It does not and never did control whether your repository leaves your machine. These are two separate systems, and only one was ever exposed to users as a setting.&lt;/p&gt;

&lt;h2&gt;
  
  
  What the Open Source Release Gives You
&lt;/h2&gt;

&lt;p&gt;xAI published Grok Build at &lt;code&gt;github.com/xai-org/grok-build&lt;/code&gt; under Apache 2.0 — roughly 844,530 lines of Rust covering:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;
&lt;strong&gt;Agent loop&lt;/strong&gt;: context assembly, model response parsing, tool-call dispatch&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Tools&lt;/strong&gt;: file reading, editing, searching, shell command execution&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Terminal UI&lt;/strong&gt;: fullscreen TUI with plan review and inline diff viewer&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Extension system&lt;/strong&gt;: skills, plugins, hooks, MCP servers, subagents&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;The practical benefits are real:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;
&lt;strong&gt;Auditable&lt;/strong&gt;: You can read exactly what the agent sends and receives&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Local inference&lt;/strong&gt;: Point it at Ollama or any OpenAI-compatible local server via &lt;code&gt;~/.grok/config.toml&lt;/code&gt; — zero cloud traffic if you want it that way&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Self-compile&lt;/strong&gt;: Build from source with &lt;code&gt;cargo build --release&lt;/code&gt; on macOS or Linux&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;The limits are equally real:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;
&lt;strong&gt;Upload code still exists&lt;/strong&gt;: The function &lt;code&gt;upload_session_state()&lt;/code&gt; in &lt;code&gt;upload/trace.rs&lt;/code&gt; now returns a hard-coded &lt;code&gt;session_state_upload_unavailable&lt;/code&gt; error — meaning the code is present but blocked at the function level&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Server-side control&lt;/strong&gt;: The upload mechanism is disabled by a flag on xAI's servers, not removed from the client&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;No external contributions&lt;/strong&gt;: Issues and pull requests are disabled on GitHub; the repository is a read-only mirror from an internal monorepo&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Grok 4.5 remains closed&lt;/strong&gt;: You can audit the harness, not the model itself&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;As security firm Hive Security noted, the server-side flag is "a mitigation that matters, but not a durable client-side security boundary."&lt;/p&gt;

&lt;h2&gt;
  
  
  How Grok Build Compares After the Open-Source Release
&lt;/h2&gt;

&lt;p&gt;The terminal coding agent market now has three major open-source or source-available entries:&lt;/p&gt;

&lt;div class="table-wrapper-paragraph"&gt;&lt;table&gt;
&lt;thead&gt;
&lt;tr&gt;
&lt;th&gt;Agent&lt;/th&gt;
&lt;th&gt;Language&lt;/th&gt;
&lt;th&gt;Licence&lt;/th&gt;
&lt;th&gt;Contributions&lt;/th&gt;
&lt;th&gt;Primary Model&lt;/th&gt;
&lt;/tr&gt;
&lt;/thead&gt;
&lt;tbody&gt;
&lt;tr&gt;
&lt;td&gt;&lt;strong&gt;Codex CLI&lt;/strong&gt;&lt;/td&gt;
&lt;td&gt;Rust&lt;/td&gt;
&lt;td&gt;Apache 2.0&lt;/td&gt;
&lt;td&gt;Accepted&lt;/td&gt;
&lt;td&gt;GPT-5.6 Sol/Terra/Luna&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;&lt;strong&gt;Grok Build&lt;/strong&gt;&lt;/td&gt;
&lt;td&gt;Rust&lt;/td&gt;
&lt;td&gt;Apache 2.0&lt;/td&gt;
&lt;td&gt;Rejected&lt;/td&gt;
&lt;td&gt;Grok 4.5&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;&lt;strong&gt;Claude Code&lt;/strong&gt;&lt;/td&gt;
&lt;td&gt;⚠️ Closed&lt;/td&gt;
&lt;td&gt;Proprietary&lt;/td&gt;
&lt;td&gt;N/A&lt;/td&gt;
&lt;td&gt;Claude Opus 5&lt;/td&gt;
&lt;/tr&gt;
&lt;/tbody&gt;
&lt;/table&gt;&lt;/div&gt;

&lt;p&gt;The convergence on Rust is notable — both Codex CLI and Grok Build chose Rust for the agent harness, prioritizing memory safety, single-binary distribution, and terminal rendering performance.&lt;/p&gt;

&lt;p&gt;Grok Build also borrowed tool implementations directly from Codex CLI. The &lt;code&gt;THIRD_PARTY_NOTICES.md&lt;/code&gt; lists &lt;code&gt;apply_patch&lt;/code&gt;, &lt;code&gt;grep_files&lt;/code&gt;, &lt;code&gt;list_dir&lt;/code&gt;, and &lt;code&gt;read_file&lt;/code&gt; as "modified ports" from OpenAI Codex under Apache §4(b). The file-system and search primitives that coding agents need have converged to a near-identical interface.&lt;/p&gt;

&lt;p&gt;One architectural divergence matters: Grok Build uses the &lt;strong&gt;Agent Client Protocol (ACP)&lt;/strong&gt; for multi-surface access, while Codex CLI uses OpenAI's Responses API. ACP means any compliant client — TUI, IDE plugin, CI harness — can drive the same agent process. Codex CLI achieves similar reach through surface-specific integrations.&lt;/p&gt;

&lt;h2&gt;
  
  
  If You Ran Grok Build Before July 13
&lt;/h2&gt;

&lt;p&gt;&lt;strong&gt;Treat everything in your tracked files and commit history as potentially compromised.&lt;/strong&gt; That means:&lt;/p&gt;

&lt;ol&gt;
&lt;li&gt;
&lt;strong&gt;Rotate all credentials&lt;/strong&gt; — API keys, database passwords, cloud tokens, webhook secrets — including ones you deleted from working files months ago, because Git history doesn't forget&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Check for SSH keys or service account credentials&lt;/strong&gt; committed at any point in the repository's history&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Audit any repo you ran Grok Build in&lt;/strong&gt; using &lt;code&gt;git log --all --full-history&lt;/code&gt; for credentials&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Do not wait on xAI's deletion promise&lt;/strong&gt; — no certificate, audit log, or third-party attestation has been published to verify data was actually purged&lt;/li&gt;
&lt;/ol&gt;

&lt;p&gt;Simon Willison reported that at least one user ran the tool in their home directory, exposing SSH keys, a password manager database, and personal files. If you ran it anywhere outside a clean, credential-free project directory, the scope is wider than you think.&lt;/p&gt;

&lt;p&gt;The practical fix for ongoing use: &lt;strong&gt;compile Grok Build from source and run it against a self-hosted inference server&lt;/strong&gt;. This removes xAI from the data pipeline entirely, which is the only way to guarantee nothing leaves your machine.&lt;/p&gt;

&lt;h2&gt;
  
  
  The Bigger Picture
&lt;/h2&gt;

&lt;p&gt;Grok Build was the outlier — security researchers tested Claude Code and Codex under equivalent conditions and found no repository bundles being transmitted. But the absence of a standard is the real issue.&lt;/p&gt;

&lt;p&gt;Ninety-two percent of US developers now use AI coding tools daily. Every one of those tools is a network-capable process running in your codebase with access to your filesystem. None of them are required to disclose what they transmit, to whom, or under what conditions.&lt;/p&gt;

&lt;p&gt;The Grok Build incident didn't create that problem. It just made it impossible to ignore.&lt;/p&gt;




&lt;p&gt;&lt;em&gt;Updated August 2, 2026 with the full security incident timeline, open-source release details, and credential rotation guidance. Originally published July 18, 2026.&lt;/em&gt;&lt;/p&gt;

</description>
      <category>grok</category>
      <category>xai</category>
      <category>codingagents</category>
      <category>security</category>
    </item>
    <item>
      <title>Cline v3.25 Ships Deep Planning, Focus Chain, and Auto Compact — Three Features That Fix Long-Task Drift</title>
      <dc:creator>TerminalBlog</dc:creator>
      <pubDate>Sun, 02 Aug 2026 04:32:32 +0000</pubDate>
      <link>https://dev.to/terminalblog/cline-v325-ships-deep-planning-focus-chain-and-auto-compact-three-features-that-fix-long-task-ccl</link>
      <guid>https://dev.to/terminalblog/cline-v325-ships-deep-planning-focus-chain-and-auto-compact-three-features-that-fix-long-task-ccl</guid>
      <description>&lt;blockquote&gt;
&lt;p&gt;&lt;em&gt;Originally published at &lt;a href="https://terminalblog.com/blog/cline-v325-deep-planning-focus-chain-auto-compact/" rel="noopener noreferrer"&gt;terminalblog.com&lt;/a&gt;.&lt;/em&gt;&lt;/p&gt;
&lt;/blockquote&gt;

&lt;p&gt;Cline v3.25 shipped on August 15, 2025, and it tackles the biggest unsolved problem in AI coding agents: &lt;strong&gt;performance collapse on long tasks&lt;/strong&gt;. Every agent degrades as conversations grow. Cline v3.25 adds three interlocking features — Deep Planning, Focus Chain, and Auto Compact — designed to keep the agent sharp at turn 50, not just turn 1.&lt;/p&gt;

&lt;p&gt;If you have ever watched an AI coding agent start strong, then slowly lose the thread of what it was doing halfway through a complex refactor, this release is the fix.&lt;/p&gt;

&lt;h2&gt;
  
  
  The Problem: Why Agents Lose the Plot
&lt;/h2&gt;

&lt;p&gt;Every AI coding agent faces the same physics. LLMs degrade in performance as context size increases. Researchers call it the "lost in the middle" effect — information buried in the middle of a long conversation gets ignored or forgotten. The degradation compounds across turns: 95% accuracy on turn 1, 92% on turn 2, 70% by turn 10, and by turn 20 the agent is hallucinating.&lt;/p&gt;

&lt;p&gt;The problem is not just that the context window fills up. The signal-to-noise ratio gets worse with every interaction. The agent's own explanations, error corrections, tool outputs, failed attempts, and file contents all pile up. The original task gets buried under layers of accumulated noise.&lt;/p&gt;

&lt;p&gt;Bigger context windows do not fix this. A million tokens of polluted context is still polluted context. The degradation curve just stretches out instead of disappearing.&lt;/p&gt;

&lt;p&gt;Cline v3.25 takes a different approach: instead of waiting for bigger windows, it curates, compresses, and resets context deliberately.&lt;/p&gt;

&lt;h2&gt;
  
  
  Deep Planning: Start With a Perfect Blueprint
&lt;/h2&gt;

&lt;p&gt;The &lt;code&gt;/deep-planning&lt;/code&gt; slash command is the first piece. When you run it with your task description, Cline enters a four-step planning phase before writing any code:&lt;/p&gt;

&lt;ol&gt;
&lt;li&gt;&lt;p&gt;&lt;strong&gt;Silent Investigation&lt;/strong&gt; — Cline reads through your entire codebase. It greps files, analyzes patterns, understands dependencies, and builds a mental model of your project. This happens quietly, with no output noise filling the context.&lt;/p&gt;&lt;/li&gt;
&lt;li&gt;&lt;p&gt;&lt;strong&gt;Targeted Discussion&lt;/strong&gt; — After investigating, Cline asks you specific questions about requirements, edge cases, and approach. These are not generic prompts. They are informed by the actual codebase structure.&lt;/p&gt;&lt;/li&gt;
&lt;li&gt;&lt;p&gt;&lt;strong&gt;Plan Creation&lt;/strong&gt; — Cline writes a detailed &lt;code&gt;implementation_plan.md&lt;/code&gt; to your project root. This document captures the architecture, file-by-file changes, dependencies, and implementation order.&lt;/p&gt;&lt;/li&gt;
&lt;li&gt;&lt;p&gt;&lt;strong&gt;Fresh Task Handoff&lt;/strong&gt; — Cline starts a new task with a clean context window. The new task includes the implementation plan, the key files it needs, and nothing else. No exploration debris. No accumulated assumptions.&lt;/p&gt;&lt;/li&gt;
&lt;/ol&gt;

&lt;p&gt;Why this matters: research shows that instructions delivered in a single consolidated plan achieve 95% optimal performance. Instructions fragmented across multiple conversation turns degrade by 39%. Deep Planning front-loads the exploration into a separate phase, then hands the distilled result to a fresh agent that starts with maximum signal and zero noise.&lt;/p&gt;

&lt;p&gt;For beginners: think of it like cooking. You would not start preheating the oven before reading the recipe. Deep Planning reads the recipe first, asks you about dietary restrictions, writes out the steps, and only then starts cooking with a clean workspace.&lt;/p&gt;

&lt;h2&gt;
  
  
  Focus Chain: A Persistent North Star
&lt;/h2&gt;

&lt;p&gt;Even with a perfect plan, agents drift. The Focus Chain is the second piece. It is enabled by default in v3.25.&lt;/p&gt;

&lt;p&gt;When you start a task, Cline automatically generates a todo list from your instructions. The critical part: Cline &lt;strong&gt;reinjects this list into context every six messages&lt;/strong&gt; (configurable in settings). Each time, it reads the list, updates what is done, and refocuses on what comes next.&lt;/p&gt;

&lt;p&gt;This is not just a UI checkbox tracker. The Focus Chain is a context injection mechanism. When the model's attention wanders due to accumulated noise, the todo list cuts through and says: "Here is what you were doing. Here is what is left." It is a recurring anchor point that prevents the slow drift that kills long sessions.&lt;/p&gt;

&lt;p&gt;The Focus Chain also adapts. As work progresses, items get checked off, new tasks emerge, and priorities shift. But the core mission stays visible. You can edit the markdown todo list directly to reorder steps, add constraints, or correct course — and Cline adapts accordingly.&lt;/p&gt;

&lt;p&gt;For beginners: the Focus Chain works like a project manager tapping your shoulder every few minutes to say "remember, we are building X." Without it, the agent might get sidetracked fixing a minor bug and forget the main feature it was supposed to implement.&lt;/p&gt;

&lt;h2&gt;
  
  
  Auto Compact: Compress and Continue
&lt;/h2&gt;

&lt;p&gt;The third piece is Auto Compact. When the context window approaches its limit, Cline automatically:&lt;/p&gt;

&lt;ol&gt;
&lt;li&gt;Creates a comprehensive summary of everything that has happened — every technical decision, code change, and progress milestone.&lt;/li&gt;
&lt;li&gt;Replaces the bloated conversation history with this compressed summary.&lt;/li&gt;
&lt;li&gt;Continues working from the summary without losing state.&lt;/li&gt;
&lt;/ol&gt;

&lt;p&gt;With Auto Compact, a task that needs 5 million tokens of interaction can complete using a 200K context window. Claude Sonnet 4's 1-million-token window becomes even more powerful — not because you can fit more pollution, but because you go longer between compressions, maintaining higher fidelity throughout.&lt;/p&gt;

&lt;p&gt;The key innovation: the Focus Chain persists through compaction. When Auto Compact summarizes the conversation, the todo list survives. The agent does not lose its place even after the context gets compressed.&lt;/p&gt;

&lt;p&gt;For beginners: Auto Compact is like taking notes during a long meeting, then replacing the 3-hour recording with a one-page summary. You keep all the important decisions without wading through every tangent. And your todo list stays pinned to the top of the summary.&lt;/p&gt;

&lt;h2&gt;
  
  
  The Trio Together
&lt;/h2&gt;

&lt;p&gt;These three features are designed as a system, not isolated additions:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;
&lt;strong&gt;Deep Planning&lt;/strong&gt; eliminates context pollution before implementation starts.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Focus Chain&lt;/strong&gt; keeps the agent on track during implementation.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Auto Compact&lt;/strong&gt; extends how long the agent can work before hitting limits.&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;Use &lt;code&gt;/deep-planning&lt;/code&gt; for anything beyond a trivial one-file change. Let Focus Chain run in the background (it is on by default). And let Auto Compact handle rollover automatically. When you need manual control mid-flow, &lt;code&gt;/smol&lt;/code&gt; compresses on demand, and &lt;code&gt;/newtask&lt;/code&gt; creates a clean handoff.&lt;/p&gt;

&lt;h2&gt;
  
  
  Other Changes in v3.25
&lt;/h2&gt;

&lt;ul&gt;
&lt;li&gt;Added 200K context window support for Claude Sonnet 4 via OpenRouter and Cline providers&lt;/li&gt;
&lt;li&gt;Added custom base URL option for Requesty provider&lt;/li&gt;
&lt;li&gt;Added GPT-OSS models to AWS Bedrock&lt;/li&gt;
&lt;li&gt;Fixed duplicate &lt;code&gt;attempt_completion&lt;/code&gt; command in progress checklist updates&lt;/li&gt;
&lt;li&gt;Fixed bug preventing announcement banner dismissal&lt;/li&gt;
&lt;/ul&gt;

&lt;h2&gt;
  
  
  How to Get Started
&lt;/h2&gt;

&lt;p&gt;&lt;strong&gt;VS Code extension:&lt;/strong&gt;&lt;br&gt;
&lt;/p&gt;

&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight shell"&gt;&lt;code&gt;code &lt;span class="nt"&gt;--install-extension&lt;/span&gt; saoudrizwan.claude-dev
&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;



&lt;p&gt;The extension ID is still &lt;code&gt;saoudrizwan.claude-dev&lt;/code&gt; from the original "Claude Dev" name. After installing, Focus Chain and Auto Compact are enabled by default.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;To use Deep Planning:&lt;/strong&gt;&lt;br&gt;
Type &lt;code&gt;/deep-planning&lt;/code&gt; in the Cline chat input, followed by your task description. Cline will investigate your codebase, ask questions, write a plan, and hand off to a fresh task.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;To adjust Focus Chain settings:&lt;/strong&gt;&lt;br&gt;
Open Cline settings (gear icon) and look for Focus Chain configuration. The default reminder interval is every 6 messages. You can make it more or less frequent depending on your task complexity.&lt;/p&gt;

&lt;h2&gt;
  
  
  Why This Matters for the Coding Agent Landscape
&lt;/h2&gt;

&lt;p&gt;Cline v3.25 directly addresses the research gap between "powerful model" and "reliable long-running agent." Bigger models and longer context windows are not enough — you need active context management. Deep Planning, Focus Chain, and Auto Compact are Cline's answer to the "lost in the middle" problem that affects every agent in the market.&lt;/p&gt;

&lt;p&gt;The approach also creates a template other agents will likely follow. Focus-style injection, plan-then-execute workflows, and automatic compaction are patterns that solve real reliability problems. Cline shipped them first as a unified system, with documentation and defaults that make them accessible to beginners.&lt;/p&gt;

&lt;p&gt;For developers evaluating coding agents, v3.25 makes Cline the most compelling option for long, complex tasks that require sustained accuracy across many turns. Pair it with a frontier model like Claude Sonnet 4, and the combination handles multi-file refactors, cross-module features, and architectural changes that previously required manual supervision throughout.&lt;/p&gt;

&lt;h2&gt;
  
  
  Related Reading
&lt;/h2&gt;

&lt;ul&gt;
&lt;li&gt;&lt;a href="https://terminalblog.com/blog/cline-free-models-opus-5-desktop-app" rel="noopener noreferrer"&gt;Cline v4.0.12 Goes Free: Zero-Cost Models, Opus 5, and Desktop App&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href="https://terminalblog.com/blog/cline-desktop-free-coding-models-zero-api-keys" rel="noopener noreferrer"&gt;Cline Desktop Launches with Free Coding Models&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href="https://terminalblog.com/blog/what-devs-say-claude-code-vs-cursor" rel="noopener noreferrer"&gt;What Developers Say About Claude Code vs Cursor&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href="https://terminalblog.com/blog/context-engineering-for-coding-agents-2026" rel="noopener noreferrer"&gt;Context Engineering for Coding Agents&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;

</description>
      <category>cline</category>
      <category>release</category>
      <category>deepplanning</category>
      <category>focuschain</category>
    </item>
    <item>
      <title>Claude Opus 5 Arrives: Near-Fable Intelligence at Half the Price, Plus Claude Code v2.1.219</title>
      <dc:creator>TerminalBlog</dc:creator>
      <pubDate>Sat, 01 Aug 2026 04:47:26 +0000</pubDate>
      <link>https://dev.to/terminalblog/claude-opus-5-arrives-near-fable-intelligence-at-half-the-price-plus-claude-code-v21219-4lk0</link>
      <guid>https://dev.to/terminalblog/claude-opus-5-arrives-near-fable-intelligence-at-half-the-price-plus-claude-code-v21219-4lk0</guid>
      <description>&lt;blockquote&gt;
&lt;p&gt;&lt;em&gt;Originally published at &lt;a href="https://terminalblog.com/blog/claude-opus-5-release-claude-code-v2-1-219/" rel="noopener noreferrer"&gt;terminalblog.com&lt;/a&gt;.&lt;/em&gt;&lt;/p&gt;
&lt;/blockquote&gt;

&lt;p&gt;Anthropic dropped Claude Opus 5 on July 24, 2026. Same day, Claude Code v2.1.219 landed with Opus 5 as the default Opus model. This is not a incremental model bump — it is the biggest leap in the Opus family since 4.5, and it changes the math on every coding agent comparison post you have read this year.&lt;/p&gt;

&lt;p&gt;If you use Claude Code, Claude Max, or Claude Pro, you already have access. If you are evaluating which agent to adopt, this release deserves a fresh look.&lt;/p&gt;

&lt;h2&gt;
  
  
  What Opus 5 Actually Is
&lt;/h2&gt;

&lt;p&gt;Claude Opus 5 is a mid-tier Opus model sitting between Sonnet and Fable. Anthropic's pitch is simple: near-Fable 5 intelligence at half the price. The benchmarks back it up.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Key numbers:&lt;/strong&gt;&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;
&lt;strong&gt;$5 per million input tokens, $25 per million output tokens&lt;/strong&gt; — same price as Opus 4.8&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;1M token context window&lt;/strong&gt; — same as Opus 4.8, handles massive codebases&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Fast mode&lt;/strong&gt; runs ~2.5× faster at 2× base price (same deal as 4.8)&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;No data retention requirement&lt;/strong&gt; — unlike Fable 5 and Mythos 5, which have 30-day retention policies&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Safety classifiers intervene ~85% less often&lt;/strong&gt; than with Fable 5 — fewer blocked prompts, fewer interruptions&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;That last point matters for coding agents specifically. Fable 5's aggressive safety classifiers have been a friction point in Claude Code workflows, where long autonomous sessions need tools and file access without constant permission prompts. Opus 5's lower classifier trigger rate means smoother autonomous runs.&lt;/p&gt;

&lt;h2&gt;
  
  
  The Benchmarks That Matter for Coding
&lt;/h2&gt;

&lt;p&gt;Opus 5 is not just marginally better than Opus 4.8. On the benchmarks developers actually care about, the gap is structural:&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Frontier-Bench v0.1:&lt;/strong&gt; Opus 5 surpasses all other models. On cost-per-task, it more than doubles Opus 4.8's performance. On CursorBench 3.2, at max effort, Opus 5 lands within 0.5% of Fable 5's peak score — at half the cost per task.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;ARC-AGI 3:&lt;/strong&gt; Opus 5's score is three times higher than the next-best model. This is the benchmark where models have to solve novel problems they have never seen before. A 3× lead is not a rounding error.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Zapier AutomationBench:&lt;/strong&gt; Opus 5's pass rate is ~1.5× the next-best model at the same cost per task. Even at its lowest effort setting, Opus 5 passes more tasks than any other model at any effort level.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;OSWorld 2.0 (computer use):&lt;/strong&gt; Opus 5 outperforms every model at any given cost, beating Fable 5's best result at roughly one-third the cost.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Real-world reports from early-access customers:&lt;/strong&gt; Cursor calls it "just under Fable 5" on CursorBench with many of the same behaviors. Lovable reports 22% improvement over Opus 4.7 on their hardest agentic coding tasks, with far less variance run-to-run. A trading firm built a market data feed in a single session — previous models could not complete the task even with extensive plans.&lt;/p&gt;

&lt;h2&gt;
  
  
  Claude Code v2.1.219: The Ops Update
&lt;/h2&gt;

&lt;p&gt;The Claude Code update shipped the same day as Opus 5. Beyond making &lt;code&gt;claude-opus-5&lt;/code&gt; the default Opus model, it ships a cluster of workflow and security features:&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;New features:&lt;/strong&gt;&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;
&lt;code&gt;sandbox.network.strictAllowlist&lt;/code&gt; — deny non-allowlisted hosts for sandboxed commands without prompting. If you are running agents on shared infrastructure or in CI, this is the network egress control you have been asking for.&lt;/li&gt;
&lt;li&gt;
&lt;code&gt;DirectoryAdded&lt;/code&gt; hook — fires after &lt;code&gt;/add-dir&lt;/code&gt; or SDK &lt;code&gt;register_repo_root&lt;/code&gt; registers a new working directory mid-session. Hooks can now react to context expansion, not just tool calls.&lt;/li&gt;
&lt;li&gt;
&lt;code&gt;mcp_server_errors&lt;/code&gt; in headless stream-json — lists which &lt;code&gt;--mcp-config&lt;/code&gt; entries were skipped by validation. No more silent MCP failures in CI.&lt;/li&gt;
&lt;li&gt;
&lt;code&gt;workflowSizeGuideline&lt;/code&gt; setting — set the advisory Dynamic workflow size from any settings file. Dynamic workflows now default to medium (aim for fewer than 15 agents).&lt;/li&gt;
&lt;li&gt;Nested subagent forwarding in stream-json — subagents at depth-2+ now appear when &lt;code&gt;--forward-subagent-text&lt;/code&gt; is set.&lt;/li&gt;
&lt;li&gt;Subagents can now spawn nested subagents up to depth 3 (was depth 1). Set &lt;code&gt;CLAUDE_CODE_MAX_SUBAGENT_SPAWN_DEPTH=1&lt;/code&gt; to revert.&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;&lt;strong&gt;Fixes:&lt;/strong&gt;&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Fixed &lt;code&gt;claude -p&lt;/code&gt; text output dropping the answer when a turn dies on a mid-stream API error. Previously, partial results were silently lost.&lt;/li&gt;
&lt;li&gt;Fixed permissions approved during self-hosted runner restarts being dropped on resume. Your approvals now persist.&lt;/li&gt;
&lt;li&gt;Fixed Fable model row showing "Requires usage credits" for plans that include it.&lt;/li&gt;
&lt;li&gt;Fixed &lt;code&gt;claude mcp list&lt;/code&gt; and &lt;code&gt;/mcp&lt;/code&gt; now showing HTTP status and error text for failed servers, plus warnings for MCP config values with hidden whitespace.&lt;/li&gt;
&lt;li&gt;Fixed Remote Control clients keeping stale fast-mode status after model switches or reconnects.&lt;/li&gt;
&lt;li&gt;Fixed Vim mode: pressing ← on empty prompt now returns to agent view from NORMAL mode.&lt;/li&gt;
&lt;li&gt;Fixed &lt;code&gt;CLAUDE_CODE_GIT_BASH_PATH&lt;/code&gt; on Windows — paths that are not bash/sh binaries are now ignored with a warning instead of being used.&lt;/li&gt;
&lt;li&gt;Fixed screen-reader mode rewriting entire input line on every keystroke.&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;&lt;strong&gt;Changes:&lt;/strong&gt;&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Dynamic workflows default to medium size. Pick another size via &lt;code&gt;/config&lt;/code&gt;.&lt;/li&gt;
&lt;li&gt;Removed Opus 4.7 from fast mode. &lt;code&gt;/fast&lt;/code&gt; now applies to Opus 5 and Opus 4.8 only.&lt;/li&gt;
&lt;li&gt;
&lt;code&gt;/model&lt;/code&gt; picker highlights only the newest model name.&lt;/li&gt;
&lt;li&gt;Managed MCP allowlist/denylist &lt;code&gt;${VAR}&lt;/code&gt; entries now resolve from startup environment and managed-settings env.&lt;/li&gt;
&lt;li&gt;Updated &lt;code&gt;claude-api&lt;/code&gt; skill to default to Claude Opus 5.&lt;/li&gt;
&lt;/ul&gt;

&lt;h2&gt;
  
  
  Pi and Other Agents: Opus 5 Adoption
&lt;/h2&gt;

&lt;p&gt;The ecosystem moved fast. Within five days of Opus 5's launch:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;
&lt;strong&gt;Pi v0.82.1&lt;/strong&gt; (July 25) added Opus 5 support on Anthropic and Amazon Bedrock with adaptive thinking, inference profiles, and prompt caching.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Pi v0.82.0&lt;/strong&gt; (July 24) shipped constrained tool sampling, OpenRouter and Kimi Code sign-in, and session-aware streaming bash integrations.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Pi v0.83.0&lt;/strong&gt; (July 29) added credential export for external clients (&lt;code&gt;pi auth print-api-key&lt;/code&gt;), headless OpenRouter sign-in for SSH sessions, and Opus 5 through GitHub Copilot.&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;If you run Pi alongside Claude Code, you now have Opus 5 on both. The credential export feature in v0.83.0 is worth noting — &lt;code&gt;pi auth print-api-key&lt;/code&gt; and &lt;code&gt;pi auth print-bearer-token&lt;/code&gt; let you pipe Pi's configured credentials into other tools, with automatic OAuth refresh and minimum-validity enforcement. For SSH workflows where you cannot use a browser redirect for login, the headless OpenRouter sign-in fills a real gap.&lt;/p&gt;

&lt;h2&gt;
  
  
  What This Changes for the "Which Agent?" Question
&lt;/h2&gt;

&lt;p&gt;If you are choosing between Claude Code, Cursor, and Copilot, Opus 5 shifts the calculus:&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;For Claude Code users:&lt;/strong&gt; This is an unambiguous upgrade. Opus 5 is now the default. You get better coding benchmarks, fewer safety interruptions, and the same price. The nested subagent depth increase to 3 and the network strict allowlist are operational improvements that matter for team workflows.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;For Cursor users:&lt;/strong&gt; Cursor already supports Opus 5 through its model picker. The DX Heroes field report noted that "Claude Opus 4.8 was the shared backbone" between Claude Code and Copilot — Opus 5 extends that. If you use Cursor for daily editing and Claude Code for heavy refactors, both tools now run on the same model.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;For Copilot users:&lt;/strong&gt; Opus 5 is available through Copilot's model picker. Pi v0.83.0 explicitly adds Opus 5 via GitHub Copilot with adaptive thinking and a 1M context window. The pricing conversation gets interesting here — Opus 5's no-retention-policy position makes it the strongest model you can run through Copilot without triggering Fable 5's 30-day data retention.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;For teams evaluating adoption:&lt;/strong&gt; Opus 5's 85% reduction in classifier interventions compared to Fable 5 means fewer blocked prompts in autonomous sessions. If your team's frustration with Fable 5 has been about constant safety interruptions killing long-running agent tasks, Opus 5 is the fix Anthropic built for that exact problem.&lt;/p&gt;

&lt;h2&gt;
  
  
  Quick Setup
&lt;/h2&gt;

&lt;p&gt;If you already have Claude Code, you already have Opus 5. To confirm:&lt;br&gt;
&lt;/p&gt;

&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight shell"&gt;&lt;code&gt;&lt;span class="c"&gt;# Check your current model&lt;/span&gt;
claude &lt;span class="nt"&gt;--model&lt;/span&gt;

&lt;span class="c"&gt;# Switch to Opus 5 if not default&lt;/span&gt;
claude &lt;span class="nt"&gt;--model&lt;/span&gt; claude-opus-5
&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;



&lt;p&gt;For API users, the model identifier is &lt;code&gt;claude-opus-5&lt;/code&gt;:&lt;br&gt;
&lt;/p&gt;

&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight shell"&gt;&lt;code&gt;curl https://api.anthropic.com/v1/messages &lt;span class="se"&gt;\&lt;/span&gt;
  &lt;span class="nt"&gt;-H&lt;/span&gt; &lt;span class="s2"&gt;"x-api-key: &lt;/span&gt;&lt;span class="nv"&gt;$ANTHROPIC_API_KEY&lt;/span&gt;&lt;span class="s2"&gt;"&lt;/span&gt; &lt;span class="se"&gt;\&lt;/span&gt;
  &lt;span class="nt"&gt;-H&lt;/span&gt; &lt;span class="s2"&gt;"anthropic-version: 2023-06-01"&lt;/span&gt; &lt;span class="se"&gt;\&lt;/span&gt;
  &lt;span class="nt"&gt;-d&lt;/span&gt; &lt;span class="s1"&gt;'{
    "model": "claude-opus-5",
    "max_tokens": 4096,
    "messages": [{"role": "user", "content": "Hello"}]
  }'&lt;/span&gt;
&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;



&lt;p&gt;For the Claude Code sandbox network allowlist (new in v2.1.219):&lt;br&gt;
&lt;/p&gt;

&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight json"&gt;&lt;code&gt;&lt;span class="p"&gt;{&lt;/span&gt;&lt;span class="w"&gt;
  &lt;/span&gt;&lt;span class="nl"&gt;"sandbox.network.strictAllowlist"&lt;/span&gt;&lt;span class="p"&gt;:&lt;/span&gt;&lt;span class="w"&gt; &lt;/span&gt;&lt;span class="p"&gt;[&lt;/span&gt;&lt;span class="w"&gt;
    &lt;/span&gt;&lt;span class="s2"&gt;"api.anthropic.com"&lt;/span&gt;&lt;span class="p"&gt;,&lt;/span&gt;&lt;span class="w"&gt;
    &lt;/span&gt;&lt;span class="s2"&gt;"github.com"&lt;/span&gt;&lt;span class="w"&gt;
  &lt;/span&gt;&lt;span class="p"&gt;]&lt;/span&gt;&lt;span class="w"&gt;
&lt;/span&gt;&lt;span class="p"&gt;}&lt;/span&gt;&lt;span class="w"&gt;
&lt;/span&gt;&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;



&lt;p&gt;To set subagent nesting back to depth 1 if you want tighter control:&lt;br&gt;
&lt;/p&gt;

&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight shell"&gt;&lt;code&gt;&lt;span class="nb"&gt;export &lt;/span&gt;&lt;span class="nv"&gt;CLAUDE_CODE_MAX_SUBAGENT_SPAWN_DEPTH&lt;/span&gt;&lt;span class="o"&gt;=&lt;/span&gt;1
&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;



&lt;h2&gt;
  
  
  The Bottom Line
&lt;/h2&gt;

&lt;p&gt;Claude Opus 5 is not a marginal model update. It is the new default for one of the most widely used coding agents, shipped at the same price as its predecessor with meaningfully better benchmarks across coding, knowledge work, and autonomous task completion. The no-retention-policy and reduced classifier intervention rate make it practically better for coding agent workflows, not just theoretically better on benchmarks.&lt;/p&gt;

&lt;p&gt;Claude Code v2.1.219 pairs it with operational improvements that teams have been asking for — sandbox network control, nested subagents, better MCP error reporting, and permission persistence across runner restarts. If you have been waiting for a reason to move off Fable 5 for daily work, this is it.&lt;/p&gt;




&lt;p&gt;&lt;em&gt;Why pay $20/mo for ChatGPT, $20/mo for Claude, $20/mo for Gemini? *&lt;/em&gt;&lt;a href="https://aifiesta.link/muhammed-anshad" rel="noopener noreferrer"&gt;aiFiesta&lt;/a&gt;** gives you all of them and more for just $12/mo. One subscription, every answer.*&lt;/p&gt;

&lt;h2&gt;
  
  
  Related articles
&lt;/h2&gt;

&lt;ul&gt;
&lt;li&gt;&lt;a href="https://terminalblog.com/blog/claude-sonnet-5-default-model-guide/" rel="noopener noreferrer"&gt;Claude Sonnet 5: The New Default Model in Claude Code — What It Is, What It Costs, and Why It Matters&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href="https://terminalblog.com/blog/goose-v1-45-opus5-gemini-airgapped-docs/" rel="noopener noreferrer"&gt;Goose v1.45.0 Brings Opus 5, Gemini Models, and Air-Gapped Docs Access&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;

</description>
      <category>claudecode</category>
      <category>anthropic</category>
      <category>opus5</category>
      <category>modelrelease</category>
    </item>
    <item>
      <title>Claude Sonnet 5: The New Default Model in Claude Code — What It Is, What It Costs, and Why It Matters</title>
      <dc:creator>TerminalBlog</dc:creator>
      <pubDate>Sat, 01 Aug 2026 04:46:43 +0000</pubDate>
      <link>https://dev.to/terminalblog/claude-sonnet-5-the-new-default-model-in-claude-code-what-it-is-what-it-costs-and-why-it-9ee</link>
      <guid>https://dev.to/terminalblog/claude-sonnet-5-the-new-default-model-in-claude-code-what-it-is-what-it-costs-and-why-it-9ee</guid>
      <description>&lt;blockquote&gt;
&lt;p&gt;&lt;em&gt;Originally published at &lt;a href="https://terminalblog.com/blog/claude-sonnet-5-default-model-guide/" rel="noopener noreferrer"&gt;terminalblog.com&lt;/a&gt;.&lt;/em&gt;&lt;/p&gt;
&lt;/blockquote&gt;

&lt;p&gt;If you use Claude Code on a Pro, Team Standard, or Enterprise plan, you are already running Claude Sonnet 5. It became the default model on June 30, 2026, and most users never noticed — which is exactly the point.&lt;/p&gt;

&lt;p&gt;Sonnet 5 is the model that powers the majority of Claude Code sessions worldwide. Understanding what it is, how it compares to the Opus and Fable tiers, and how its pricing works will save you money and help you pick the right model for each task.&lt;/p&gt;

&lt;h2&gt;
  
  
  What Claude Sonnet 5 Is
&lt;/h2&gt;

&lt;p&gt;Claude Sonnet 5 is Anthropic's latest mid-tier model, positioned below Opus 5 and Fable 5 in capability but above Haiku in intelligence. The headline: it delivers performance close to Opus 4.8 at roughly half the cost.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Key facts:&lt;/strong&gt;&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;
&lt;strong&gt;Native 1M token context window&lt;/strong&gt; — the same massive context as Opus 5, enough for entire codebases&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Adaptive thinking on by default&lt;/strong&gt; — the model reasons through problems step by step without you asking&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;$2 per million input tokens, $10 per million output tokens&lt;/strong&gt; through August 31, 2026 (introductory pricing)&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Standard pricing after August 31:&lt;/strong&gt; $3/$15 per million tokens&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Available on all plans:&lt;/strong&gt; Free, Pro, Max, Team, Enterprise, and through the API&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;That promotional pricing matters. At $2/$10 per MTok, Sonnet 5 is cheaper per token than Sonnet 4.6 was at its standard rate, despite being a significant capability upgrade. The token counts may shift slightly due to a new tokenizer (roughly 1.0–1.35× more tokens per input), but Anthropic set the introductory price to make the transition roughly cost-neutral.&lt;/p&gt;

&lt;h2&gt;
  
  
  Why It Matters for Coding Agent Users
&lt;/h2&gt;

&lt;p&gt;For most developers using Claude Code, Sonnet 5 is not an optional upgrade — it is the model you already have. Here is why that is good news.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;1. Agentic performance that used to require Opus&lt;/strong&gt;&lt;/p&gt;

&lt;p&gt;Sonnet 5 narrows the gap with Opus-class models on the capabilities that matter for coding agents: reasoning, tool use, sustained multi-step work, and self-correction. Anthropic's own evaluations show Sonnet 5 matching or approaching Opus 4.8 on agentic tasks at medium and high effort levels.&lt;/p&gt;

&lt;p&gt;Early-access partners reported concrete improvements:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;"We handed Claude Sonnet 5 a two-part job — update Salesforce account tiers, send a launch announcement — and it finished end to end. That used to stall halfway."&lt;/li&gt;
&lt;li&gt;"I asked Claude Sonnet 5 to investigate a bug. Unprompted, it wrote a reproducing test, implemented the fix, then stashed it to confirm the bug came back without the change. All in a single pass."&lt;/li&gt;
&lt;li&gt;"Claude Sonnet 5 handled the full range of coding tasks we tested it on, while resolving more issues."&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;&lt;strong&gt;2. The 1M context window changes what you can do&lt;/strong&gt;&lt;/p&gt;

&lt;p&gt;With a native 1M token context, Sonnet 5 can hold an entire large codebase in working memory. This means fewer context compactions, less lost state, and better performance on tasks that span many files. You do not need to upgrade to Opus for the context window anymore.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;3. Adaptive thinking without extra configuration&lt;/strong&gt;&lt;/p&gt;

&lt;p&gt;Sonnet 5 enables adaptive thinking by default. The model reasons through complex problems internally before responding, which improves code quality and reduces back-and-forth. No &lt;code&gt;/effort&lt;/code&gt; command needed — it just works out of the box.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;4. Safer than its predecessor&lt;/strong&gt;&lt;/p&gt;

&lt;p&gt;Anthropic's safety evaluations found Sonnet 5 has lower rates of hallucination, sycophancy, and undesirable behavior compared to Sonnet 4.6. It is also better at refusing malicious requests and resisting prompt injection attacks. For coding agents running autonomously, this means fewer surprises.&lt;/p&gt;

&lt;h2&gt;
  
  
  How Sonnet 5 Compares to Other Claude Models
&lt;/h2&gt;

&lt;p&gt;Here is where Sonnet 5 fits in the current Claude model lineup:&lt;/p&gt;

&lt;div class="table-wrapper-paragraph"&gt;&lt;table&gt;
&lt;thead&gt;
&lt;tr&gt;
&lt;th&gt;Model&lt;/th&gt;
&lt;th&gt;Price (input/output per MTok)&lt;/th&gt;
&lt;th&gt;Context&lt;/th&gt;
&lt;th&gt;Best For&lt;/th&gt;
&lt;/tr&gt;
&lt;/thead&gt;
&lt;tbody&gt;
&lt;tr&gt;
&lt;td&gt;&lt;strong&gt;Haiku&lt;/strong&gt;&lt;/td&gt;
&lt;td&gt;~$0.25/$1.25&lt;/td&gt;
&lt;td&gt;200K&lt;/td&gt;
&lt;td&gt;Simple tasks, quick edits&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;&lt;strong&gt;Sonnet 5&lt;/strong&gt;&lt;/td&gt;
&lt;td&gt;$3/$15 (promo: $2/$10)&lt;/td&gt;
&lt;td&gt;1M&lt;/td&gt;
&lt;td&gt;Daily coding, most tasks&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;&lt;strong&gt;Opus 5&lt;/strong&gt;&lt;/td&gt;
&lt;td&gt;$5/$25&lt;/td&gt;
&lt;td&gt;1M&lt;/td&gt;
&lt;td&gt;Complex reasoning, hardest tasks&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;&lt;strong&gt;Fable 5&lt;/strong&gt;&lt;/td&gt;
&lt;td&gt;Custom&lt;/td&gt;
&lt;td&gt;1M&lt;/td&gt;
&lt;td&gt;Frontier research, specialized&lt;/td&gt;
&lt;/tr&gt;
&lt;/tbody&gt;
&lt;/table&gt;&lt;/div&gt;

&lt;p&gt;&lt;strong&gt;The practical decision tree:&lt;/strong&gt;&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;
&lt;strong&gt;Everyday coding, debugging, refactoring, writing tests:&lt;/strong&gt; Sonnet 5. This is what the default model is for.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Complex architectural decisions, multi-file refactors, novel problem solving:&lt;/strong&gt; Consider Opus 5, which has stronger reasoning at a higher price.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Tasks requiring the absolute maximum capability regardless of cost:&lt;/strong&gt; Fable 5, with its 30-day data retention caveat.&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;For the vast majority of Claude Code sessions, Sonnet 5 is the right choice. Opus 5 adds value on the hardest tasks, but the cost-per-task ratio favors Sonnet 5 for routine work.&lt;/p&gt;

&lt;h2&gt;
  
  
  How to Use Sonnet 5 in Claude Code
&lt;/h2&gt;

&lt;p&gt;If you are on a Pro, Team Standard, or Enterprise plan, Sonnet 5 is already your default. You do not need to do anything.&lt;/p&gt;

&lt;p&gt;To verify or switch manually:&lt;br&gt;
&lt;/p&gt;

&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight shell"&gt;&lt;code&gt;&lt;span class="c"&gt;# Check which model is active&lt;/span&gt;
/model

&lt;span class="c"&gt;# Switch to Sonnet 5 explicitly&lt;/span&gt;
/model claude-sonnet-5

&lt;span class="c"&gt;# Switch back to the account default&lt;/span&gt;
/model default
&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;



&lt;p&gt;If you are on Max, Team Premium, or Enterprise pay-as-you-go, your default is Opus 5. To switch to Sonnet 5 for lighter tasks:&lt;br&gt;
&lt;/p&gt;

&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight shell"&gt;&lt;code&gt;/model claude-sonnet-5
&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;



&lt;p&gt;This saves your selection, so future sessions start with Sonnet 5 until you change it again.&lt;/p&gt;

&lt;h3&gt;
  
  
  For API Users
&lt;/h3&gt;

&lt;p&gt;The model identifier is &lt;code&gt;claude-sonnet-5&lt;/code&gt;:&lt;br&gt;
&lt;/p&gt;

&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight shell"&gt;&lt;code&gt;curl https://api.anthropic.com/v1/messages &lt;span class="se"&gt;\&lt;/span&gt;
  &lt;span class="nt"&gt;-H&lt;/span&gt; &lt;span class="s2"&gt;"x-api-key: &lt;/span&gt;&lt;span class="nv"&gt;$ANTHROPIC_API_KEY&lt;/span&gt;&lt;span class="s2"&gt;"&lt;/span&gt; &lt;span class="se"&gt;\&lt;/span&gt;
  &lt;span class="nt"&gt;-H&lt;/span&gt; &lt;span class="s2"&gt;"anthropic-version: 2023-06-01"&lt;/span&gt; &lt;span class="se"&gt;\&lt;/span&gt;
  &lt;span class="nt"&gt;-d&lt;/span&gt; &lt;span class="s1"&gt;'{
    "model": "claude-sonnet-5",
    "max_tokens": 4096,
    "messages": [{"role": "user", "content": "Explain this error"}]
  }'&lt;/span&gt;
&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;



&lt;h3&gt;
  
  
  Effort Levels
&lt;/h3&gt;

&lt;p&gt;You can tune Sonnet 5's reasoning depth:&lt;br&gt;
&lt;/p&gt;

&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight shell"&gt;&lt;code&gt;&lt;span class="c"&gt;# Default — balanced speed and quality&lt;/span&gt;
/effort medium

&lt;span class="c"&gt;# More thorough reasoning for complex tasks&lt;/span&gt;
/effort high

&lt;span class="c"&gt;# Maximum reasoning (closer to Opus-level quality)&lt;/span&gt;
/effort xhigh

&lt;span class="c"&gt;# Fast responses for simple tasks&lt;/span&gt;
/effort low
&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;



&lt;p&gt;Higher effort = more tokens consumed = better results on hard problems. For most daily coding work, the default medium effort is fine.&lt;/p&gt;

&lt;h2&gt;
  
  
  Pricing: The August 31 Deadline
&lt;/h2&gt;

&lt;p&gt;The most important thing to know about Sonnet 5 pricing right now: &lt;strong&gt;the introductory rate ends August 31, 2026.&lt;/strong&gt;&lt;/p&gt;

&lt;div class="table-wrapper-paragraph"&gt;&lt;table&gt;
&lt;thead&gt;
&lt;tr&gt;
&lt;th&gt;Period&lt;/th&gt;
&lt;th&gt;Input (per MTok)&lt;/th&gt;
&lt;th&gt;Output (per MTok)&lt;/th&gt;
&lt;/tr&gt;
&lt;/thead&gt;
&lt;tbody&gt;
&lt;tr&gt;
&lt;td&gt;&lt;strong&gt;Now through August 31&lt;/strong&gt;&lt;/td&gt;
&lt;td&gt;$2&lt;/td&gt;
&lt;td&gt;$10&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;&lt;strong&gt;After August 31&lt;/strong&gt;&lt;/td&gt;
&lt;td&gt;$3&lt;/td&gt;
&lt;td&gt;$15&lt;/td&gt;
&lt;/tr&gt;
&lt;/tbody&gt;
&lt;/table&gt;&lt;/div&gt;

&lt;p&gt;If you are doing high-volume API work, the 30 days remaining on the promotional rate represent a meaningful cost saving. A million input tokens at $2 vs $3 is a 33% difference. For teams processing thousands of requests per day, this adds up fast.&lt;/p&gt;

&lt;p&gt;Plan your heaviest API usage before August 31 if possible.&lt;/p&gt;

&lt;h2&gt;
  
  
  What Opus 5 Users Should Know
&lt;/h2&gt;

&lt;p&gt;If you are running Opus 5 (the default for Max and Team Premium), Sonnet 5 is worth considering for lighter tasks. Here is the practical split:&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Use Opus 5 for:&lt;/strong&gt;&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Complex multi-file refactors&lt;/li&gt;
&lt;li&gt;Architectural decision-making&lt;/li&gt;
&lt;li&gt;Tasks where you need the strongest reasoning available&lt;/li&gt;
&lt;li&gt;Security-sensitive work (Opus has lower classifier intervention than Fable)&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;&lt;strong&gt;Switch to Sonnet 5 for:&lt;/strong&gt;&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Routine bug fixes&lt;/li&gt;
&lt;li&gt;Writing tests&lt;/li&gt;
&lt;li&gt;Code reviews on focused changes&lt;/li&gt;
&lt;li&gt;Documentation updates&lt;/li&gt;
&lt;li&gt;Any task where speed and cost matter more than maximum reasoning depth&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;You can switch mid-session with &lt;code&gt;/model claude-sonnet-5&lt;/code&gt; and switch back with &lt;code&gt;/model opus&lt;/code&gt; when you hit a harder problem.&lt;/p&gt;

&lt;h2&gt;
  
  
  How Other Agents Handle Sonnet 5
&lt;/h2&gt;

&lt;p&gt;The ecosystem adopted Sonnet 5 quickly:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;
&lt;strong&gt;Pi&lt;/strong&gt; added Sonnet 5 support starting with v0.81.0 (July 21), including adaptive thinking and prompt caching. If you run Pi alongside Claude Code, you can use Sonnet 5 in both.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Cursor&lt;/strong&gt; supports Sonnet 5 through its model picker. Cursor's "Auto mode" powered by Cursor Router can select Sonnet 5 for appropriate tasks.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;OpenAI Codex&lt;/strong&gt; does not use Claude models natively, but the broader trend of "smart default models at mid-tier pricing" is reshaping how all agents think about model selection.&lt;/li&gt;
&lt;/ul&gt;

&lt;h2&gt;
  
  
  Common Questions
&lt;/h2&gt;

&lt;p&gt;&lt;strong&gt;Will Sonnet 5 replace Opus 4.8 entirely?&lt;/strong&gt;&lt;/p&gt;

&lt;p&gt;Yes, for most users. Sonnet 5 is the new default, and Opus 4.8 is being phased out of fast mode. If you explicitly select Opus 4.8, you will still get it, but there is little reason to prefer it over Sonnet 5 or Opus 5.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Does Sonnet 5 have data retention?&lt;/strong&gt;&lt;/p&gt;

&lt;p&gt;No. Like Opus 5, Sonnet 5 does not require data retention. This is in contrast to Fable 5 and Mythos 5, which have 30-day retention policies. For sensitive codebases, Sonnet 5 is a safer choice than Fable.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;What about the new tokenizer?&lt;/strong&gt;&lt;/p&gt;

&lt;p&gt;Sonnet 5 uses an updated tokenizer that can produce 1.0–1.35× more tokens for the same input text, depending on content type. The introductory pricing was set to make the transition roughly cost-neutral. After August 31, the standard pricing accounts for this.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Can I pin to a specific Sonnet 5 version?&lt;/strong&gt;&lt;/p&gt;

&lt;p&gt;Yes. Use the full model name &lt;code&gt;claude-sonnet-5&lt;/code&gt; instead of the &lt;code&gt;sonnet&lt;/code&gt; alias. You can also set &lt;code&gt;ANTHROPIC_DEFAULT_SONNET_MODEL&lt;/code&gt; in your environment to control which version the alias resolves to.&lt;/p&gt;

&lt;h2&gt;
  
  
  The Bottom Line
&lt;/h2&gt;

&lt;p&gt;Claude Sonnet 5 is the model most coding agent users interact with every day. It delivers near-Opus performance at Sonnet prices, with a 1M context window, adaptive thinking, and no data retention requirements. The promotional pricing through August 31 makes this the most cost-effective time to use it for high-volume API work.&lt;/p&gt;

&lt;p&gt;If you are on Pro or Team Standard, you already have it. If you are on Max and running Opus 5 for everything, consider switching to Sonnet 5 for routine tasks and saving Opus for the hard problems. The model is good enough that you will not notice the difference on most days.&lt;/p&gt;




&lt;p&gt;&lt;em&gt;Why pay $20/mo for ChatGPT, $20/mo for Claude, $20/mo for Gemini? *&lt;/em&gt;&lt;a href="https://aifiesta.link/muhammed-anshad" rel="noopener noreferrer"&gt;aiFiesta&lt;/a&gt;** gives you all of them and more for just $12/mo. One subscription, every answer.*&lt;/p&gt;

&lt;h2&gt;
  
  
  Related articles
&lt;/h2&gt;

&lt;ul&gt;
&lt;li&gt;&lt;a href="https://terminalblog.com/blog/claude-opus-5-release-claude-code-v2-1-219/" rel="noopener noreferrer"&gt;Claude Opus 5 Arrives: Near-Fable Intelligence at Half the Price, Plus Claude Code v2.1.219&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href="https://terminalblog.com/blog/goose-v1-45-opus5-gemini-airgapped-docs/" rel="noopener noreferrer"&gt;Goose v1.45.0 Brings Opus 5, Gemini Models, and Air-Gapped Docs Access&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;

</description>
      <category>claudecode</category>
      <category>anthropic</category>
      <category>sonnet5</category>
      <category>modelrelease</category>
    </item>
    <item>
      <title>Coding Agents in 2026: Three Hard Lessons HN Developers Learned the Expensive Way</title>
      <dc:creator>TerminalBlog</dc:creator>
      <pubDate>Sat, 01 Aug 2026 04:46:06 +0000</pubDate>
      <link>https://dev.to/terminalblog/coding-agents-in-2026-three-hard-lessons-hn-developers-learned-the-expensive-way-15lc</link>
      <guid>https://dev.to/terminalblog/coding-agents-in-2026-three-hard-lessons-hn-developers-learned-the-expensive-way-15lc</guid>
      <description>&lt;blockquote&gt;
&lt;p&gt;&lt;em&gt;Originally published at &lt;a href="https://terminalblog.com/blog/coding-agents-three-hard-lessons-hn-developers/" rel="noopener noreferrer"&gt;terminalblog.com&lt;/a&gt;.&lt;/em&gt;&lt;/p&gt;
&lt;/blockquote&gt;

&lt;p&gt;Hacker News has a habit of cutting through marketing fog. When a new coding agent ships with a slick demo, the comment section is where reality shows up — usually with a receipt. Over the past week, three separate HN discussions produced over 100 developer comments that paint a picture the launch posts never show. The themes: your agent's isolation is an illusion, the chat interface is the wrong answer to the right question, and the cost math has a hole in it nobody wants to talk about.&lt;/p&gt;

&lt;p&gt;If you are evaluating coding agents, building with them, or just wondering whether the hype matches the experience, these three lessons are worth your time.&lt;/p&gt;

&lt;h2&gt;
  
  
  Lesson 1: Your Isolation Is an Illusion
&lt;/h2&gt;

&lt;p&gt;The first discussion came from a blog post titled "Git worktrees are not an isolation boundary for coding agents," which racked up 34 comments and 31 points on HN. The core argument: if you are running multiple coding agents in parallel using git worktrees — the standard pattern most people reach for — you do not actually have isolation. An agent in one worktree can reach across to your hooks, your git config, and even another worktree's stash.&lt;/p&gt;

&lt;p&gt;The reaction was fierce and split right down the middle.&lt;/p&gt;

&lt;p&gt;On one side, developers who had never hit the problem pushed back hard. One user reported running hundreds of worktrees over months without issue. Another said the whole premise was a "straw man argument to sell your product." The counterargument was simple: worktrees were never designed for security isolation — they are for parallel workstreams. If you need real isolation, use containers.&lt;/p&gt;

&lt;p&gt;But the other side told a different story. An engineer described the exact failure mode: an agent modifying a pre-commit hook in a worktree, which then runs on commits made &lt;em&gt;outside&lt;/em&gt; that worktree. Another described a scenario where Codex or Claude Code was configured to nest worktrees inside the parent repository, causing grep results to bleed between agents. The agent would then "happily start to work in the wrong worktree."&lt;/p&gt;

&lt;p&gt;The technical consensus that emerged was telling. Multiple developers pointed to tools like &lt;code&gt;nono&lt;/code&gt; — a permission system that can block file writes at the directory level — as the real fix. One contributor explained how their setup blocks the &lt;code&gt;.git/hooks&lt;/code&gt; directory and &lt;code&gt;.git/config&lt;/code&gt; from agent writes entirely, even inside a worktree. The tradeoff: you cannot run &lt;code&gt;git config&lt;/code&gt; from inside the agent's environment, which is frustrating but worth it.&lt;/p&gt;

&lt;p&gt;The most interesting comment came from a developer building their own agent harness: "I set up a custom hook in Claude which runs my own worktree creation and cleanup script, which takes care of copying my node_modules into the worktree, my .env — plus doing some edits to the .env to isolate it so it can run in parallel. Each worktree gets its own docker compose project name so they can run docker stacks in parallel."&lt;/p&gt;

&lt;p&gt;That level of manual orchestration is the current state of the art for running agents safely. It works. But it is not what anyone would call "batteries included."&lt;/p&gt;

&lt;p&gt;The thread also produced an unexpected meta-discussion about AI-generated blog posts. Multiple users pointed out the original blog post looked AI-generated — from the box styling to the prose structure. "Do people not know how to write blogs without AI anymore?" one commenter asked. Another said they could "literally tell from the box styling." This is not a tangent; it is a signal. The same coding agents that write your code are now writing the blog posts about coding agents, and developers are noticing the sameness. One developer said they are building a toggle to separate AI-generated content from human writing on their personal site.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;What it means for you:&lt;/strong&gt; If you are running agents in parallel with worktrees, you need an additional isolation layer. The minimum viable setup: block agent writes to &lt;code&gt;.git/hooks&lt;/code&gt;, &lt;code&gt;.git/config&lt;/code&gt;, and &lt;code&gt;.git/worktrees&lt;/code&gt; at the harness or filesystem level. Worktrees give you code isolation. They do not give you behavior isolation. Treat every agent like a process that might mutate shared state, because it can.&lt;/p&gt;

&lt;h2&gt;
  
  
  Lesson 2: Nobody Knows What the Interface Should Be
&lt;/h2&gt;

&lt;p&gt;The second discussion — "What should the GUI for AI agents look like?" — hit 31 comments and 52 points. The product in question was Marble, a workspace-style interface for managing AI agent tasks. But the real content was the argument about what agent interfaces should become.&lt;/p&gt;

&lt;p&gt;The most quoted comment came from a developer who described agents as "a junior that knows everything about programming but has no idea how to properly apply it." That analogy stuck because it captures the specific frustration: the raw knowledge is there, the judgment is not. And the current interface — a text box where you type instructions — does nothing to compensate for that gap.&lt;/p&gt;

&lt;p&gt;Several competing visions emerged. One developer argued that "the GUI for AI agents that will win is a plain text editor with a file tree, a terminal pane for coding and a chat sidebar." The key insight was not about features — it was about psychology. "Even if the code editor is not used to type, it's there for psychological safety. It lets you inspect and navigate what is being created." That framing resonated: the interface is not for control, it is for comfort.&lt;/p&gt;

&lt;p&gt;Another developer offered a more radical take: the winning interface is "a git-tracked folder, files as state, agents coming in and doing work." No chat, no special GUI — just files that represent what the agent is doing, updated like a blackboard. The agent writes a task file, updates it as it works, and multiple agents can read the same task file. This is the "files as agents" pattern, and it is gaining traction among developers who think chat is the wrong metaphor entirely.&lt;/p&gt;

&lt;p&gt;The deepest exchange was about whether humans should stay in the loop at all. One commenter claimed that needing a human to drive the AI is "probably a transitional phase." The response was sharp: "Whether or not it's a transitional phase, it seems reasonable to want and to build better tools for where we are now rather than where we may be in some unspecified future." The developer building the product agreed, noting that "even a superintelligence won't know what we want until we tell it. The process of communicating intent to an AI agent is a nontrivial interface problem."&lt;/p&gt;

&lt;p&gt;A historical comparison kept surfacing: Microsoft OLE and OpenDoc from the 1990s. The ideas behind agent workspaces — composable, task-oriented, not tied to a single document — are decades old. What is new is that agents are finally capable enough to make them practical. But the implementation is still primitive, which is why the debate is happening at all.&lt;/p&gt;

&lt;p&gt;The plain-text-vs-GUI argument produced the sharpest back-and-forth. The plain-text camp argued that novel GUIs "don't survive the real world. Meanwhile, plain text tools endure because they're simple and they work." The GUI camp countered that "plaintext alone won't be the main way for humans to express intent and interact with an agent." Both sides agreed on one thing: the current chat window is not the end state. It is the AOL dial-up of agent interfaces — a necessary step that will look absurd in five years.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;What it means for you:&lt;/strong&gt; Do not bet your workflow on any single agent GUI right now. The interface is in active flux. The developers getting the most value from agents are the ones who use the simplest possible interface — a terminal, a text file tracking agent state, and clear task decomposition — and layer on GUI tools only where they genuinely reduce cognitive load. If your agent workflow requires you to memorize what tools exist or describe everything through prompts, the interface is fighting you, not helping you.&lt;/p&gt;

&lt;h2&gt;
  
  
  Lesson 3: The Cost Math Has a Hole
&lt;/h2&gt;

&lt;p&gt;The third discussion was the most technically dense. "Launch HN: Tokenless — Automatic model switching to save money" drew 60 comments and 70 points, with developers dissecting whether intelligent model routing actually saves money or just adds complexity.&lt;/p&gt;

&lt;p&gt;The founder's pitch was straightforward: run multiple models in parallel, watch their reasoning, and cut off the ones that are clearly failing. Use cheap models for easy tasks, expensive ones only when needed. The result: better quality at lower cost.&lt;/p&gt;

&lt;p&gt;The skepticism was immediate and detailed. The first comment — with significant upvotes — pointed out that the savings only materialize when the cache is cold. "Most agentic work involves long strings of successive tool calls that benefit from a hot cache. Hot cache calls reduce input cost by 90%. This can basically only deliver cost savings in turns where the AI delivers a result to the user, the user waits at least 5 minutes." In other words, for the kind of continuous agent work most developers do, the routing savings evaporate.&lt;/p&gt;

&lt;p&gt;The founder's response revealed an important nuance: it is not just about cold caches. Sometimes a cheap model will spend 100 turns struggling with a task that a frontier model cracks in one. The real savings come from knowing — before spending those 100 turns — that you need to escalate. But multiple developers questioned how the system quantifies difficulty. One asked bluntly: "How does Tokenless quantify 'so hard'?"&lt;/p&gt;

&lt;p&gt;The comparison to OpenRouter came up repeatedly. "How is this different from OpenRouter?" one developer asked. Another was more pointed: "There is no difference. It is just another metoo copy of OpenRouter, but 'Backed by Y Combinator.'" The YC branding drew predictable snark, but the substantive concern was real: model routing is a feature, not a product. And features get commoditized.&lt;/p&gt;

&lt;p&gt;The most useful technical discussion was about prompt caching. Multiple developers confirmed that switching models mid-session destroys the cache. "Some agents, when you alter the reasoning level, partially or completely wipe the cache. Never assume that changing reasoning is a no-impact change," one warned. Claude's documentation explicitly states that cache breaks with reasoning effort adjustments. This means any routing system that changes models mid-conversation is throwing away the single biggest cost reduction mechanism available.&lt;/p&gt;

&lt;p&gt;Developers who had already solved the cost problem themselves shared their approaches. One described using DeepSeek as a "code exploration sub-agent" that burns cheap tokens scanning a codebase, then returning a compact summary to a frontier model for actual implementation. Another shared a system that uses cheap models to build "cheap context" — compressing and cleaning information before it reaches the expensive model. The pattern is consistent: use cheap models for context gathering, expensive models for decision-making.&lt;/p&gt;

&lt;p&gt;The Amazon anecdote that surfaced in a separate thread — spending $1.8 million on a menial coding task — drew a surprisingly dismissive response: "This is not noteworthy. Simple misconfiguration and over-provisioning can result in the same thing, and that happens all the time." The real lesson, several developers argued, is not that AI is expensive. It is that AI cost management requires the same discipline as cloud cost management, and most teams have not built that discipline yet.&lt;/p&gt;

&lt;p&gt;A veteran of the cloud cost optimization space offered historical perspective: "15 years ago I was working for AWS, and at some point tens of startups came out to provide cost optimization, cloud switching, etc. None of them survived or had meaningful exits. The main reason is that this is a feature that gets commoditized really quickly." The implication: building a business on model routing is risky because the model providers themselves will eventually absorb the feature.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;What it means for you:&lt;/strong&gt; The cheapest way to run coding agents is not clever routing. It is architecture. Use cheap models for codebase exploration, context compression, and straightforward tasks. Use frontier models for complex reasoning, cross-file refactoring, and novel problem-solving. Keep your cache warm by avoiding mid-session model switches. And budget for cost management from day one — set token limits, monitor usage per task type, and review spending weekly. The teams spending $50/month on agents are not using better models. They are using models more deliberately.&lt;/p&gt;

&lt;h2&gt;
  
  
  The Bigger Picture
&lt;/h2&gt;

&lt;p&gt;Three discussions, three uncomfortable truths. The isolation story tells you that agent security is your problem to solve, not the tool vendor's. The GUI story tells you the interface is still a research problem, not a product problem. The cost story tells you that the economics only work if you architect for them deliberately.&lt;/p&gt;

&lt;p&gt;The thread that connects all three is the trust question. Every developer in these discussions is trying to figure out the same thing: how much can I let the agent do before I lose control — of my code, of my interface, of my budget? The developers getting value are the ones who have drawn explicit boundaries. The ones struggling are the ones who trusted the defaults.&lt;/p&gt;

&lt;p&gt;That pattern — explicit boundaries beat implicit trust — is the single most repeated insight across every HN coding agent discussion this week. It is not a surprise to anyone who has shipped software with other humans. But it is a surprise to anyone who expected the agent to handle that part for them.&lt;/p&gt;

&lt;h2&gt;
  
  
  Related articles
&lt;/h2&gt;

&lt;ul&gt;
&lt;li&gt;&lt;a href="https://terminalblog.com/blog/cursor-ipad-app-build-review-merge-code/" rel="noopener noreferrer"&gt;Cursor Now Runs on iPad — Build, Review, and Merge Code From Your Couch&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;

</description>
      <category>opinion</category>
      <category>hackernews</category>
      <category>codingagents</category>
      <category>security</category>
    </item>
  </channel>
</rss>
