Fetching from the wire…
Public story · 2026-09-08 · high
The Rust binary serves function source, callers, and impact analysis over MCP, but TypeScript and Go parsing still lags behind Python and Rust.
Why now: Girder's byte benchmark and license terms live only in its own repo, which is what anyone should check before adding it to a TypeScript or Go agent workflow.
Girder answers an agent's code question with 8,765 bytes where a full-file read costs 408,137, per its own ten-node test case. The count is bytes, not tokens. That's still a 97.85% cut in what an agent has to read before it can act. For anyone running agents against large repos, it means less of the context window spent on file contents the task doesn't need.
The tool parses a repo into functions, definitions, and call edges. It runs as one static Rust binary and answers queries over MCP. Beyond raw source lookups, it traces the call graph for impact analysis and picks the tests that cover a changed function. It can also apply edits addressed by graph location instead of by line number.
The free tier covers get_source, find_definition, search_code, ask_codebase, and review_changes. License checks run offline, and there's no telemetry.
Rust and Python parsing is mature. TypeScript and Go are still gated behind documented limits, so repos in either language won't see close to that byte cut yet.
Each link below shares sources, entities, or timing with this story.
| Project | Stars | What It Does | Why It Matters | |---------|-------|-------------|----------------| | Worktrunk | 2.7K | Rust CLI for Git worktrees with AI agents | Auto-squash/rebase/merge, LLM commit messages, build cache sharing. From PRQL creator. | | Timber | 545 | Com...
Apache-2.0, flows are VejasScript code written by agents from a natural language prompt, reviewed in git, and run by a single Rust binary on NATS with no Python or subprocesses (GitHub). Domain experts adjust business rules, transcoding tables and thresholds through a panel wi...
Apache-2.0, rootless, single static binary, no daemon, claiming about 3.5ms container start against Docker's roughly 297ms and zero resident memory when idle (GitHub). It reads OCI images and docker-compose files but deliberately skips Docker's API, overlay networks and Swarm,...
github.com/RightNow-AI/openfang — First "Agent OS" in a single 32MB Rust binary. Autonomous scheduled agents with 7 pre-built "Hands" capability packages, 137K lines, 40 channel adapters, 16 security layers. 180ms cold start vs. 2-6s for Python frameworks. The "agent OS" categ...
A single architectural decision, replicated across Python, TypeScript, Java, and Rust, sitting at the center of the protocol most agent builders now run. OX Security's research team disclosed a critical vulnerability in the official Model Context Protocol SDKs that enables arb...
OX Security researchers found a design-level flaw in Anthropic's Model Context Protocol STDIO transport that turns MCP tool invocations into OS command execution via configuration-to-command injection. Affected projects include LiteLLM (CVE-2026-30623, patched), Agent Zero, an...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.