AI Dev Gems: Week of Sep 26–Oct 2, 2026
JetBrains' system for building software with coding agents like Claude Agent, Codex, Junie, Copilot and OpenCode across its IDEs, the web, CLI and mobile.
Why: JetBrains' Air page lists support for any agent connected via ACP, plus automations such as code review and auto-rebase triggered by repo events.
Cloudflare's coding-agent skill that runs a multi-phase security audit and produces independently verified, machine-readable findings.
Why: Official repo at cloudflare/security-audit-skill, created June 2026, with updates through Sep 2026.
Open-source harness that turns Claude Code, Codex and Pi into persistent agent teams with roles, shared context and owned work on long-running projects.
Why: mvschwarz/openrig ships often; v0.7.6 was published Oct 30, 2026.
Open-source CLI that parses a codebase into a persistent graph of symbols, calls and imports so humans and agents can query structure instead of grepping.
Why: ix-infrastructure/Ix released v0.13.0 on Oct 6, 2026.
Open-source coordination protocol for coding agents that catches intent conflicts before they become merge conflicts, built above Git with a shared SQLite store.
Why: naw103/foremerge released v0.6.0 on Oct 24, 2026.
CLI for coding agents that finds relevant files and source context by asking what the code does, using Jev decision models to judge relevance.
Why: dzhng/jevgrep was created Sep 2026 and shipped v0.8.0 on Oct 1, 2026.
Universal desktop UI for coding harnesses that speaks the Agent Client Protocol, with SSH support and encrypted browser access via Web Connect.
Why: Built by Cachix (cachix/agentaps); v0.7.0 was released Oct 29, 2026.
Hardware-isolated, persistent Linux VMs for developers and agents that boot in under 10ms, fork and snapshot running stacks, and cost nothing while idle.
Why: boxd.sh documents create, fork, snapshot, checkpoint and hibernate primitives and offers a self-host option alongside its cloud.
Security scanner for AI agent setups that flags hardcoded secrets, permission misconfigs, hook injection, risky MCP servers and prompt-injection vectors.
Why: affaan-m/agentshield ships as a CLI and GitHub Action; v1.6.0 was released Sep 10, 2026.
CLI that keeps agents, skills, rules, hooks and MCP servers in one portable source and syncs them into each AI coding tool's native config.
Why: Chemaclass/agnostic-ai released v0.90.0 on Oct 29, 2026.
Java 21+ and Kotlin runtime for building MCP servers on Netty, with Streamable HTTP, virtual-thread handlers and full MCP conformance.
Why: tachyonmcp/tachyon reached v1.0.1 on Oct 9, 2026.
Agent evals and guardrails built on Jev decision models instead of LLM judges, one request per trace and fast enough to run inside the agent loop.
Why: Open source at openlayer-ai/jevals (created Sep 2026) and its repo description says it runs locally with Kev or Laya.
Free, open-source desktop app to browse, install and manage SKILL.md agent skills across 20+ coding agents from one interface.
Why: skillsgate/skillsgate released desktop-v0.8.1 on Oct 12, 2026.
Session analytics for teams using Claude Code and Codex, surfacing traces, API costs, token usage and agent patterns across an organization.
Why: opalinehq/cli shipped opaline-cli@0.15.0 on Oct 16, 2026.