Fetching from the wire…
01
02
03
04
05
06
07
08
Agents2026-06-15 · source-backed
The TypeScript framework added a v1 ToolProvider runtime for managing OAuth-backed connections, @mastra/mysql as a first-class storage backend, and a VercelMicroVMSandbox built on ephemeral Firecracker microVMs (GitHub). The MicroVM sandbox is the standout. Per-session isolated execution is becoming table-stakes for safely running tool-and-code-executing agents, and it ties straight to the OX Security story above. Isolation is no longer optional polish.
Each link below shares sources, entities, or timing with this story.
Firecracker + CoW mmap forking spawns KVM-isolated sandboxes in 0.79ms p50 with 265KB memory per instance — versus E2B's ~150ms and ~128MB. At this scale, sandboxed code execution becomes viable inside interactive agent loops where latency directly impacts UX. GitHub ---
Also: stored agents from the Agents API can run with durable: true with no redeploy, @mastra/rag gained serialize()/GraphRAG.deserialize() so knowledge graphs survive restarts, and sandboxes advertise supportsCheckpoints with filesystem-backed snapshots. (GitHub) A day earlier...
Each project gets a throwaway VM where the agent has full tool access to Docker, git, compilers and package managers with no path back to the host (GitHub). coop setup installs Firecracker and a guest kernel on Linux; macOS goes through Lima via Homebrew. Usage is coop up then...
Plugins, MCP, skills, rules, hooks and tools now live in tabbed sections with live counts, and the standalone Marketplace page is gone so catalog installs appear inline above the browse list (GitHub). The Models page regroups providers into Connected, Popular and All with brow...
BakeLens/crust (355 stars) — Go-based transparent gateway that intercepts agent tool calls and blocks dangerous actions via hot-reloadable YAML rules. Fills the critical gap between static code scanning and full VM isolation. Define rules like "block all file writes outside /t...
3,364 stars since its August 17 creation. Every action against a computer, file, MCP server or UI component routes through a single gateway that resolves the target, decides it against policy, writes an audit row, then acts or refuses while naming the rule. Each bot gets its o...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.