On October 2, 2026, Apple said it will make macOS Full Disk Access harder to grant because of AI agents. No date yet, but if your terminal already has the permission, every agent you launch from it can read your Messages, Mail and Safari data. Here is how to audit it.
Cloudflare launched a Web Search API on October 2, 2026: one endpoint that lets an AI agent search the web through Ceramic.ai at $0.25 per 1,000 requests, Linkup at $5 or Exa at $7, with no markup. Here is how it prices against Brave, Tavily and Claude's search tool.
Comfy API deploys ComfyUI workflows as autoscaling endpoints. Its four GPU prices are exactly 1.30x Runpod Serverless flex rates, its idle window is a fixed 30 seconds, and our comfy build init test found public models queued for upload and node requirements the spec missed.
Sign in with ChatGPT now lets Plus and Pro subscribers spend their plan in other apps, with no API key. We checked the 4 open-source tools OpenAI lists on launch day: only Pi shipped it in a stable release, and the route refuses image generation.
Shopify opened checkout to browser AI agents on September 28. We tested 8 stores in Chrome 154: every storefront exposed 11 tools, but no checkout did until WebMCP was switched on, and one partial update wiped a buyer's address.
AI scrapers fill missing fields with real text from the wrong line of the page. We rebuilt the "Do not guess" twin-page test on a CPU: quote checks caught 0 of 7 decoys, and a 4B checker model caught them all.
UpGuard found 16,326 Supabase databases with tables anyone can read, many from apps built by AI coding agents. We tested 12 common RLS setups and wrote a 15-minute audit to check your own project.
Meituan's LongCat-2.5-Preview landed on 25 September with a 1M-token context, image and video input, and a free OpenCode tier. It costs $0.30 in and $1.20 out per million tokens direct, but Meituan has published no benchmarks yet.
Whiteboard, an open-source app from the YC W26 startup /dev/fast, shipped on 24 September. Claude Code and Codex can draw diagrams, semantic diffs and decision logs that link back to the code. Here is how to set it up, and what leaves your machine.
Docker Cloud Sandboxes launched on 24 September at $0.14 an hour for 2 vCPUs, the lowest flat rate against E2B, Daytona and Modal. But Docker bills idle time, and coding agents spend much of theirs waiting on the model.
Placeholder domains like yoursite.com appear in 349 AI agent skills and anyone can own them. We scanned 658 popular skills, found 20 hits, and wrote a 10-minute audit.
Anthropic made Claude Code cloud sessions generally available on September 23, with a one-time $100 credit on Pro and $250 on Max. The VM is free; the credit pays for model usage, and on Opus 5.5 it goes less far than it sounds.
Google's Antigravity SDK now runs agents on local models: Gemma 4 26B A4B through LiteRT-LM, or any OpenAI-compatible server such as Ollama, LM Studio or vLLM. We read the SDK source and the demo code behind its 97.2% local-token headline.
Claude Code v2.1.277 can read AGENTS.md as a project's instruction file, closing the last conspicuous gap in a standard used by 60,000+ repositories. The documentation tells a more conditional story than the changelog does.
Victor Taelin's Bend 2 makes your AI supply a machine-checked proof that your rules still hold. The proof is real. It moves the work into specification, which is the part people are worst at.
Cline shipped a desktop app on September 14, 2026, and the interesting part is not the window. Every headline feature was already shipping as an installable package four months ago, when Cline released its SDK.
OpenAI released the Agents API in public beta on 10 September 2026, a managed Codex harness that runs the agent loop for you. Anthropic shipped the same shape five months earlier.
Herdr v0.9.0 lets one window hold the coding agents running on every machine you own. The enabling change is architectural, and it also defines exactly what this release cannot do.
Avatoon is an open-source React Three Fiber component that drops a talking, lip-synced 3D avatar into any web or React Native app. Version 1.10.0 shipped July 15, 2026 under an MIT license.
ReviewFlow is a new open-source extension that moves GitLab code review inside your editor, so you can draft comments and publish merge request reviews without leaving Cursor or VS Code.
Kastra is a runtime authorization layer that checks every shell command, file edit, and API call your AI coding agent makes before it runs.
Condense, a new context-compression proxy for AI coding agents, launched July 3 2026 with a claim aimed at heavy Claude Code users: up to 70% lower token bills with almost no quality loss.
CrossUI Studio is a visual IDE for React that writes every canvas edit back to your source as a precise AST patch with no export step and no lock-in.
Context engineering just got a dedicated workbench. On June 23, 2026, DAI Studio launched a free visual tool that lets you design, see, and version the exact context you feed into a large language model before it runs.