Portable Agent Plugins Arrive as CI Becomes the Bottleneck

OpenAI, Vercel, Cursor, and their partners are turning skills and MCP configurations into portable agent plugins. The same period’s GitHub Actions outage is a reminder that elegant agent loops still terminate at infrastructure.

Sawyer Hood

swyx

DHH

+11

🔥 TOP SIGNAL

Agent Plugins makes the harness portable. OpenAI’s announcement describes an open standard built with AWS, Cursor, GitHub, VS Code, and Vercel that packages Agent Skills and MCP server configurations in a shared format; Romain Huet frames it as the portability step after AGENTS.md, Agent Skills, and .agents config. Cursor says it already supports bundling skills and MCP servers across agents. Build one small skill-plus-MCP bundle and test it in two clients now; interoperability is the hypothesis to validate, not a benefit to assume.

⚡ TRY THIS

Turn parallel threads into a dependency graph. Create one thread per independently testable task, have it ping back when finished, and preserve each thread’s work rather than collapsing everything into one context. swyx says this creates a workable kanban/waterfall graph in today’s coding agents; Theo’s inbox-style sidebar is the UI version of the same idea—he says it lets him keep 4+ threads active without losing context.
Choose the harness before writing the prompt. LangChain’s current rule is to start with create_deep_agent when you want the bundled context machinery: filesystem-backed context, subagents, on-demand skills, and memory. Use the minimal LangChain loop plus middleware when you need fine-grained tool/context control or deterministic summarization and verification; move to LangGraph when the workflow needs a custom graph, durable execution, fault tolerance, or human-in-the-loop steps.
Route models by task, then measure the routing. Cursor’s vendor-reported starting matrix is Grok 4.5 for routine work, GPT-5.6 Sol for planning and codebase comprehension, Opus 5 for execution-heavy tasks, and Fable 5 for debugging and visual implementation. Treat that as a policy to test against your own repository with latency, cost, and acceptance checks—not as an independent benchmark.
Run a product-shaped eval instead of another toy benchmark. swyx proposed giving developers $1,000 in tokens and one weekend to clone an enterprise SaaS his team might otherwise buy for more than $40,000 per year; the prospective customer evaluates the result, the winner gets $10,000, and the code is open-sourced. Borrow the format at smaller scale: pick a workflow your team actually cares about, cap tokens and time, and let the would-be user judge the build. This is a proposed eval format, not a demonstrated result.

📡 WHAT SHIPPED

Codex Security Review — research preview. OpenAI says it uses repository context to inspect GitHub pull requests for security issues and place actionable findings directly in the PR; automatic reviews are documented here: security review setup. Greg Brockman says Codex can now review every GitHub pull request and leave findings inline.
pi 0.84.0. Armin Ronacher’s agent tool adds fullscreen/alt-screen mode, LaTeX and Mermaid rendering in the transcript, improved Windows support, and AGENTS.override.md support. Full changelog.
Cloudflare MCP v2. The rewritten MCP core is stateless and designed to run on web infrastructure such as Workers, with a new feature lifecycle and SDK migration path. Kent C. Dodds says Kody Koala is already updated to the latest spec, calling the change a major simplification.
Smol Forge opened its first 100-user alpha. swyx describes it as a fast, agent-native Git remote; the onboarding instruction is to point an agent at forge.smol.ai/llms.txt. It is explicitly rough—transcript functionality is broken—so this is a hands-on watchlist item, not a production recommendation.
Omarchy Quattro moved from alpha to beta. DHH reports a codebase 4× the size of the 3-series, including roughly 40K lines of Quickshell QML, while the overall system is a quarter of its former code, the ISO is 20% smaller, and installs are up to 40% faster. He calls it his most agent-accelerated codebase and credits frontier models with QML writing and Linux diagnosis; those are maintainer-reported figures, not an independent benchmark.
bb is picking up an adoption signal. Ben Tossell calls it “likely my new default.” Sawyer Hood’s project is an open-source, MIT-licensed orchestrator that works with Codex, Claude Code, Cursor, and ACP-compatible agents, while letting users ask the agent to extend the IDE itself. Repo.
CI reality check: Theo reported GitHub Actions had been down for five hours, with 85% of Actions webhooks not being processed; Armin Ronacher said a pi patch release was blocked because publishing depended on CI. Check provider status before debugging an agent loop that is waiting on PR webhooks or deployment signals.

🎬 GO DEEPER

Video — Riley Brown: Guillermo Rauch on Vercel’s internal agent. The episode covers Vercel’s internal agent V, described as being used by almost 1,000 people, then gets concrete about building an agent: start with an instructions.md identity, add a tools/ folder, connect a team channel, and keep writes behind existing permissions.

The follow-on segment is the part to copy: collect thumbs-up/down feedback, aggregate failures overnight, keep a human in the improvement loop, and encode behavior and accuracy as evals.

Repo — bb. Study its extension model rather than just its UI: the launch post lists agent-built task management, 2D thread navigation, GitHub-webhook code review using Codex computer use, markdown editing, crons, inline previews, and remote access. It is a useful specimen of an orchestrator whose missing features become prompts.

Editorial take: The durable alpha edge is moving from clever prompts to portable capabilities, task-routed models, and measured control planes.

Want personalized briefs on the topics you care about?

Create your own agent and get daily or weekly cited briefs on the topics you care about, shaped by the people, newsletters, podcasts, blogs, and channels you choose.