Notes

jdx (@jdxcode), creator of mise, hk and pitchfork, is happy with how fnox is working — "Fort Knox for your secrets", an encrypted/remote secret manager in Rust (MIT, ~2090 stars). One CLI for secrets across dev, CI and production: encrypt in git with age/AWS KMS/Azure KMS/GCP KMS, or pull from cloud providers like AWS Secrets Manager, Azure Key Vault, GCP Secret Manager, 1Password, Bitwarden, Infisical and HashiCorp Vault. He still feels it's not simple enough though — the goal is secrets that are idiot-proof.

One overlooked failure mode for email-handling agents is trusting the sender address, which is trivially spoofable. Developer __morse argues agents should verify DMARC and DKIM before acting on a message, and built an email CLI that does exactly that — rejecting mail with spoofed senders. He frames it as a prerequisite for letting agents respond to subscription-cancel requests, where a forged sender could otherwise trigger real account changes.

Ryan Dahl, creator of Node.js and Deno cofounder, introduces Dactyl, a vibe coding platform for native iOS and Android apps. Its trick is a SwiftUI renderer compiled to WASM, so a device simulator runs in the browser canvas with low latency while you develop — OAuth flows and even camera access work through browser APIs. It can connect your own ChatGPT subscription, and via magic it runs the same SwiftUI code the agent writes on Android with native components. Built on Durable Objects.

M5Stack released PaperMono, an e-paper development board built around the ESP32-S3 with a 3.97-inch four-level grayscale touch display, front light, 1150mAh battery, PDM mic, IMU, and microSD slot. The full version adds NFC and LoRa (868–923 MHz) for low-power display, near-field identification, and long-range communication; a streamlined PaperMono-Lite drops the radio and NFC.

TheNJDevOpsGuy released ABox, an experimental open-source harness that runs an agent, its prompts, model calls, and tools in isolation on a developer's laptop. His argument: the industry has focused on sandboxing agents in production (servers, cloud, Kubernetes), but the biggest security entry point is agents running locally on someone's machine. ABox is early-stage and open to PRs.

lencx got remote control working for Minke, the native desktop workspace for DeepSeek Harness, with a new release coming. Minke is a local-first agentic desktop: files, a real PTY terminal, browser and plugins beside the conversation, plus Minke Host for remote workspaces — no screen sharing. An independent community project, not an official DeepSeek product.

BinaryScriptar launched Traks, free self-hosted web analytics that runs entirely inside your own Cloudflare account: ingest via Pipelines into R2 as Parquet, query with R2 SQL — no warehouse, no ETL. Cookie-less 1.5 KB tracker, edge-resolved locations, funnels and goals, and every instance ships an MCP server plus a ready-made SKILL.md so your agents can pull stats and create goals. Deploys in about two minutes; the Workers plan covers millions of events.

Fini Yang, an enterprise agent architect and open-source author, shipped dsh-ios, the fourth plugin for DeepSeek Harness (DSH) — adding iOS simulator and real-device automation so agents can build and run apps, tap, swipe, type, and inspect processes, call stacks, and memory leaks. It bundles 21 agent tools, a live sidebar view for human-in-the-loop operation, and SwiftUI preview hot reload, covering iOS development, debugging, and automation entirely inside DSH.

Tembo, the Postgres infrastructure company, launched Tembo Desktop — a desktop app promising any model and any coding agent in a single surface, built for teams. The pitch is consolidating the increasingly fragmented coding-agent toolchain into one app instead of hopping between agent CLIs and chat UIs. It fits Tembo's broader push to move coding agents to the cloud, and is worth a look for teams standardizing on agent workflows.

@willmcgugan is bringing his Visual Markdown editor to the Mac App Store very soon — it takes much of its DNA (focus modes, typewriter) from Ishmael but lands at a coffee-and-croissant price point, going for volume this time.

Corey Chiu released Wake v0.1.0, a native macOS app (Rust + GPUI) that pulls every coding-agent session — Claude Code, Codex, Cursor and others — into one window. Full-text search with a trigram index handles CJK and code substrings, transcripts render with tree-sitter highlighting, and one click resumes the session in Terminal at the original project directory. Pure local, zero network, open source MIT.

Joel Hooks shares how he starts a CLI project with content-grill, a local context plane that slurps signals from Brain and X into a searchable surface (under 2s) and runs grilling sessions that surface topics worth digging into — topics only, never publishable copy. Stack: oxlint, TypeScript 7, Effect v4 RC, and XState for the slurp lifecycle, with Dillon Mulroy and Kit Langton baked in.

LittleDivy (@undefined_void), engineer at Deno, introduces durable git — a Git forge built on Cloudflare Durable Objects. Each repository lives in a single Durable Object holding packfiles and refs, speaking Git's smart HTTP protocol behind a simple cgit-inspired web interface. No origin server, no filesystem, and idle repos cost nothing; self-host with a single npx wrangler deploy. https://github.com/littledivy/dgit

Boshen (@boshen_c) announces React Compiler support across the Oxc toolchain: Oxlint now ships 22 React Compiler-powered rules that catch violations of the Rules of React, while the new oxc-transform-react package applies the compiler's automatic memoization over 10x faster than Babel in preliminary benchmarks. Vite integration is coming via @vitejs/plugin-react. https://oxc.rs/blog/2026-08-18-react-compiler-support

Tencent has open-sourced Hy-MT2, a translation model family built to run locally — the 1.8B variant compresses to 440MB via a custom 1.25-bit quantization and runs 1.5x faster than its predecessor. A post from @bkdgiffug highlights that the lightweight version already beats Microsoft's and Doubao's commercial translation APIs, while the 7B and 30B models outpace DeepSeek-V4-Pro and other open-source rivals. No cloud, no cost, surprisingly solid quality — a welcome direction for practical local AI.

Shanghai-based indie developer @vikingmute praises PaddleOCR and Unlimited OCR as two of the most benevolent open-source projects around. He calls PaddleOCR the best OCR available today — it runs on CPU alone with great speed and accuracy for everyday use — while Unlimited OCR, Baidu's long-document model, handled a long PDF impressively in his testing.

Raycast extension author spikezhangx updated Agent Usage, his plugin for tracking AI agent usage, to show DeepSeek balance alongside stats for other agents — handy for keeping an eye on API spend straight from the menu bar.

LLMJunky announced GooeyPi, a GUI for the Pi family of local agents — Pi, Oh-My-Pi, and Prime Agent. It bundles an agentic browser, realtime voice, local or API transcription, computer use, agent-to-agent messaging, and a terminal, so you can run local models without juggling configs or falling back to the TUI. Currently in beta on macOS, Linux, and Windows, with the author looking for testers.

Michael Grinich, founder of WorkOS, open-sourced Replay, a small Mac app he built in a weekend for downloading videos from YouTube and X to watch later. It jumps between chapters, plays back up to 2.5x, shrinks to a corner player when backgrounded, and handles batch adding, subtitles and reordering/renaming — a tidy fix for videos that would otherwise vanish. https://github.com/grinich/replay

@lassejv shares gpui-starter, a minimal starter template for GPUI — Zed's Rust UI framework — with the Groknight dark theme and a single clickable button. It ships as a two-crate workspace (theme/root view plus native binary bootstrap) built on GPUI and gpui_platform from the Zed codebase. A tidy baseline for trying native Rust desktop UIs without fighting the build setup.