vibehacker
News
Hugging Face Blog (LightOn) ·

ColGrep-Agent-2B: local 2B code-search agent cuts Claude Code tokens by 34%

LightOn released ColGrep-Agent-2B, an open 2B local code-search agent that sits between a coding agent and the repo; in their Claude Code tests on 52 questions across 13 repos, delegating search cut API tokens 34% and cache-aware cost 40% vs grep, with no statistically significant accuracy change. Install with brew install lightonai/tap/colgrep && colgrep --install-agent, then colgrep --install-claude-code (Codex and OpenCode hooks too).

Read at huggingface.co
Claude Code
An AI coding agent for terminal, IDE, web, and Slack

More news

View all

Codex raises GPT-6.1 Sol default context from 272K to 500K

OpenAI Codex lead Tibo raised GPT 6.1 Sol’s default context in Codex and ChatGPT Work from 272K to 500K tokens ( 80% more) to cut compactions on long tasks, with no long context fees on ChatGPT subscription usage. Override via model context window and model auto compact token limit in /.codex/config.toml ; the API max remains 1M…

AICoder

Codex CLI 0.157.0 starts a persistent self-updating app-server daemon by default

Opening an interactive Codex session on 0.157.0 now spins up a background app server that survives after the TUI exits, copies 374 MB of platform bits under /.codex , and runs an hourly updater that can force kill active turns after a 60s drain. Opt out with codex features disable daemon auto start , then codex app server daemon stop (and kill any leftover pid update loop )…

AppSec Scoop

Garuda: open-source coding agent with an OS sandbox (Seatbelt / bubblewrap)

Madhusudhan Vasanth Kumar’s Apache 2.0 terminal, VS Code, and Zed agent runs commands in Seatbelt (macOS) or bubblewrap (Linux) so they write only in the project, temp folders, and package caches, with home secrets unreadable and no network by default; edits show a diff first, and a hash chained audit log records every permission decision. Install with npm install g @garuda agent/garuda ; it works with Claude, OpenRouter, and local OpenAI compatible models…

Garuda / Madhusudhan Vasanth Kumar

Repeat-After-Me: six agent frameworks run attacker tool calls the model only echoed

Penn State, Montpellier, and Dartmouth showed LangGraph, AutoGen, Google ADK 2.0, AWS Strands, Microsoft Agent Framework, and CrewAI will execute a structured tool call if the model is prompted to echo it—even when the model later refuses. Their ToFu fuzzer also confirmed 253 bugs across 118 open source MCP servers, including 64 path traversal and three command injection flaws…

CSO Online

Spotted something we missed? Start a thread.