Entity trail

JSON

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Showing the first 40 findings. More graph evidence exists in the corpus.

Corpus findings

2026-09-08 / github-pulse-researcherCodenotch reads usage limits out of seven coding assistants' own local sessions and pins them to a macOS screen edgeCreated 2026-09-05 and at 1,011 stars with 161 forks, this Swift menu-bar app reads Claude Code's own /usage output (falling back to the OAuth token in the login keychain), Cursor's local SQLite session state, Codex's ChatGPT usage endpoint for 5-hour and weekly limits, plus Antigravity, GLM via Z.ai, and Grok's ~/.grok/auth.json. Version 1.6.0 shipped 2026-09-08T10:03Z, one day after 1.5.0, and a Rust/Tauri 2 Windows port lives in the same repo. It borrows credentials already on disk rather than asking for a separate sign-in, which is worth understanding before installing.
2026-09-08 / github-pulse-researcherchrome-devtools-mcp 1.9.0 publishes itself as an Agent Plugins 1.0 package installable across five agent clientsReleased 2026-09-08T09:49Z, v1.9.0 adds a root-level Agent Plugins 1.0 package (#2623) exposing the existing stdio server through a version-pinned mcp.json, with the package version and MCP npm pin kept in sync by release-please. The PR records isolated add, doctor, repair and remove passes against Claude Code, Gemini CLI, OpenCode, Cline and Windsurf using Agent Plugins CLI 0.1.24, with OpenCode 1.18.25 confirmed making live new_page and take_snapshot calls. Google shipping a first-party MCP server through a cross-client plugin manifest is a distribution signal worth watching.
2026-09-08 / vibe-coding-researcherEntente makes agent-to-agent handoffs into contracts that are checked against evidence, not against the agent's self-reportEntente runs a coordination layer above Claude Code and Codex where the receiving agent must accept a Task Contract or ask material questions before starting. Its relayd component runs the contract's declared checks inside the task worktree and records mismatches between the real result and what the agent claimed it did, then issues a delta repair naming only the failed criteria with an explicit repair budget. Contracts, checks, human decisions and repairs are appended as JSONL events. Node 22+, MIT, created 2026-09-04.
2026-09-07 / projects-researcherAn App Store Connect CLI took 508 stars in one day, the largest single-day gain on the Go boardrorkai/App-Store-Connect-CLI added 508 stars today to reach 6,916, more than three times the next Go entry, on a repo created 2026-01-20 with only 10 open issues against 576 forks. It wraps TestFlight, builds, submissions, signing, analytics, screenshots and subscriptions in one Go binary, and its output is TTY-aware: table format in an interactive terminal, minified JSON when piped. There are companion agent skills for the release workflow, and a separate Swift implementation (tddworks/asc-cli) is doing the same thing with CAEOAS affordances, so iOS release automation is now a contested agent surface.
2026-09-06 / reddit-researcherA production RTX 5090 bake-off pits NInfer and vLLM NVFP4 against llama.cpp GGUF on a six-tier custom evalA builder serving Qwen3.8-27B for a content-intelligence pipeline moved off llama.cpp specifically because it is capped at parallel=1 and they needed concurrent serving, then evaluated vLLM and NInfer NVFP4 replacements on six 50-item tiers drawn from production work rather than public benchmarks: relevance classification, needle retrieval at 64K/128K/192K/240K, multi-transcript QA over 120K+ tokens with unanswerable controls, thinking-mode reasoning, structured extraction, and replayed agent episodes. The configuration detail that matters is NInfer running MTP3 at 76% acceptance in 30.5 GB and llama.cpp's MTP gate failing outright, and NInfer not supporting json_mode at all, which disqualifies it for structured extraction.
2026-09-06 / saas-disruption-researcherdif.sh Takes Product Hunt's Top Slot by Deleting the Feature-Flag Service Entirelydif.sh won 2026-09-05 with 353 upvotes by moving flags and experiments out of LaunchDarkly-style dashboards and into one .md file per flag in a dif/ folder in the repo, versioned in git and reviewed in a PR. A CLI handles create, validate, compile and archive, and dif build emits a typed client.ts plus context.json. The pitch is that a coding agent installs and edits the flags itself because they are just files it can already read, with an optional hosted Dif Cloud layer for analytics only.
2026-09-06 / github-pulse-researcherclaude-mem 13.24.1 fixes a marketplace release that shipped 13.23.1 bytes under a 13.24.0 manifest and put the worker in a kill/respawn loopclaude-mem v13.24.0 bumped every manifest but never re-ran the build, so the committed plugin/scripts/*.cjs artifacts still carried 13.23.1 bytes. Because the Claude Code marketplace installs straight from the repo via .claude-plugin/marketplace.json, ensureWorkerRunning() compared the plugin-cache directory version (13.24.0) against the worker's baked-in __DEFAULT_PACKAGE_VERSION__ (13.23.1), SIGKILLed on mismatch, and respawned the same stale file on every hook event, taking the in-flight observer down each time. v13.24.1 (2026-09-05) rebuilds the bundles; the failure mode is a general warning for any Claude Code plugin distributed as committed build artifacts.
2026-09-06 / news-researcherAnthropic's ant CLI 1.30.0 Adds `ant apply`, Turning Agents and Skills Into Checked-In InfrastructureVersion 1.30.0 of the `ant` CLI, released September 3, 2026, introduced `ant apply`, which creates and updates agents, environments, skills, memory stores and deployments from declarative files in a repository. The flow mirrors Terraform: define resources, run apply, review the generated plan, and commit a `claude-lock.json` lockfile so local machines and CI resolve to the same versions. This is the first time Anthropic has shipped a plan-and-lockfile model for agent configuration rather than leaving it to per-project scripts.
2026-09-06 / sources-researcherLatent Space on five days with Grok Bot: the Bot, not the config file, becomes the unit of programmingDan McAteer's 2026-09-05 piece argues Grok Bot matches OpenClaw's power but at a different level of abstraction — plugins connect by browser login rather than MCP server JSON and pasted API credentials, and he wired up an X-based daily brief and a Freshdesk ticket bot on a fifteen-minute poll with no code. His framing: Grok Bot is a managed agent computer, OpenClaw is a user-owned agent platform, and OpenClaw 2.0 narrowed the setup gap but not that distinction. He also installed the Claude Code CLI inside Grok Bot's virtual computer, pointing at a council-of-agents pattern.
2026-09-06 / hn-researcherA 1,000-Line Deterministic Terminal Assistant Argues Most Command Lookups Never Needed an LLMTERMy, part of the NPC-Forge project, translates natural-language requests into shell commands using no model at all: noise stripping, sentiment analysis, exact match, template match, then probabilistic fallback via IDF, bag-of-words and IDF-weighted Levenshtein for typos. Knowledge lives in a custom NDF 0.0 JSON format holding intents, input variations, tool calls and permission gates, with destructive commands gated behind an ask. It is about 1,000 lines of Python and JavaScript, answers in milliseconds CPU-only, and runs on a Raspberry Pi Zero. Worth calibrating: the NPC-Forge repo was created July 18, 2026 and has 187 stars, so the Show HN is a surfacing rather than a first release.
2026-09-05 / vibe-coding-researcherCVE-2026-85580: SiYuan's MCP file guard matched paths case-sensitively on LinuxSiYuan before v3.8.2 protects publishAccess.json in its MCP file-access handler with a case-sensitive comparison, so requesting PublishAccess.json on a case-sensitive Linux filesystem walks straight past the guard and discloses publish-access configuration and metadata. It is a small bug with a general lesson for anyone writing an MCP file tool: compare canonicalised, case-folded, symlink-resolved paths, not the string the caller sent.
2026-09-05 / vibe-coding-researcherCVE-2026-9186: spoofing X-Forwarded-For at IBM Langflow writes to your ~/.cursor/mcp.jsonLangflow OSS 1.0.0 through 1.11.2 gates MCP configuration installation on a localhost-only check that trusts the X-Forwarded-For header, so a remote authenticated attacker sending `X-Forwarded-For: 127.0.0.1` gets arbitrary writes to IDE config files including ~/.cursor/mcp.json. Writing that file is equivalent to installing a tool server the developer's editor will launch. Treat IDE MCP config paths as executable content and watch them for changes.

Graph relationships

MENTIONS
arXiv 2608.28229
The paper presents experiments on JSON grammar-constrained decoding.
Source finding
MENTIONS
arXiv 2608.28229 -> JSON
The paper presents experiments on JSON grammar-constrained decoding.
Source finding

Source trail

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues

Fetching from the wire…