The AI Toolchain — issue -245, December 15, 2025

Agno v2.3.13 adds JWT-based Role-Based Access Control to AgentOS with per-endpoint and per-agent scope enforcement.

$ git clone --branch v2.3.13 https://github.com/agno-agi/agno.git
# already have the repo? check out this version:
$ git checkout v2.3.13

• ›Adds JWTMiddleware class to AgentOS for JWT-based authorization, requiring signed JWT tokens with user permission scopes on all traffic — verification_keys=[...] is the new recommended way to supply keys over the deprecated secret_key parameter.
• ›Supports per-endpoint authorization via configurable required scopes on each AgentOS endpoint.
• ›Supports per-agent (and per-Team, per-Workflow) resource control via scopes like agents:my-agent:read, restricting which users can invoke POST /agents/{id}/runs or read from GET /agents and GET /agents/{id}.

LangChain 1.2 adds a strict flag to ProviderStrategy structured output and extras on BaseTool.

$ git clone --branch langchain==1.2.0 https://github.com/langchain-ai/langchain.git
# already have the repo? check out this version:
$ git checkout langchain==1.2.0

• ›Adds strict flag to ProviderStrategy structured output, enabling strict-mode enforcement when generating structured outputs via the provider strategy.
• ›Adds extras field to BaseTool, allowing arbitrary extra metadata to be attached to tool definitions.

Lightweight coding agent that runs in your terminal

Codex CLI v0.73.0 adds OpenTelemetry tracing, ghost snapshot v2, ghost commit config support, and a reimplemented SkillsManager.

$ git clone --branch rust-v0.73.0 https://github.com/openai/codex.git
# already have the repo? check out this version:
$ git checkout rust-v0.73.0

• ›Adds ghost snapshot v2 for improved session capture.
• ›Supports ghost commits via config for session replay workflows.
• ›Reimplements skills loading via SkillsManager and skills/list for consistent discovery.
• ›Adds OpenTelemetry tracing support for observability into Codex operations.

The open source coding agent.

OpenCode v1.0.158 improves fuzzy search by prioritizing results that start with user input.

$ git clone --branch v1.0.158 https://github.com/sst/opencode.git
# already have the repo? check out this version:
$ git checkout v1.0.158

• ›Improves fuzzy search ranking to surface results that start with the user's input first.

$ git clone --branch v1.0.154 https://github.com/sst/opencode.git
# already have the repo? check out this version:
$ git checkout v1.0.154

$ opencode --prompt "Audit all TODO comments in the codebase and create a summary report"

# In opencode config (e.g. opencode.json)
{
  "experimental": {
    "continue_loop_on_deny": true
  }
}

# In opencode config
{
  "experimental": {
    "chat": {
      "system": {
        "transform": "path/to/system-transform-hook.js"
      }
    }
  }
}

AI agent toolkit: unified LLM API, agent loop, TUI, coding agent CLI

Pi v0.22.0 adds GitHub Copilot OAuth login with access to Claude, GPT, Gemini, Grok, and more.

$ git clone --branch v0.22.0 https://github.com/earendil-works/pi.git
# already have the repo? check out this version:
$ git checkout v0.22.0

• ›Adds GitHub Copilot integration via OAuth login (/login → "GitHub Copilot"), supporting github.com and GitHub Enterprise with models sourced from models.dev including Claude, GPT, Gemini, and Grok — all automatically enabled after login.

SYCL backend gains GPU support for gpt-oss models via mxfp4 matrix multiply, add-id, and swiglu_oai ops

$ git clone --branch b7406 https://github.com/ggml-org/llama.cpp.git
# already have the repo? check out this version:
$ git checkout b7406

• ›Adds SYCL GPU support for gpt-oss models via the add-id, mul_mat (mxfp4), and swiglu_oai operations, enabling hardware-accelerated inference for this model family on Intel SYCL devices.

$ git clone --branch b7405 https://github.com/ggml-org/llama.cpp.git
# already have the repo? check out this version:
$ git checkout b7405

Tool Router goes GA in Python and TypeScript SDKs, with webhook verification and LangChain v1 support added.

$ git clone --branch v0.10.0 https://github.com/ComposioHQ/composio.git
# already have the repo? check out this version:
$ git checkout v0.10.0

session = composio.create(...)

• ›Adds composio.triggers.verifyWebhook() (TypeScript) and verify_webhook() on the Triggers class (Python) for signature-based webhook verification of incoming trigger payloads.
• ›Promotes Tool Router from experimental to stable in both the Python (composio==0.10.0) and TypeScript (@composio/[email protected]) SDKs, enabling isolated MCP sessions with scoped toolkit access via composio.create().
• ›Adds native tool execution through ToolRouterSession in the Python SDK and an enhanced session.tools() method in the TypeScript SDK, allowing direct tool invocation without additional setup.
• ›Ports the Python LangChain provider (python/providers/langchain/) to LangChain v1, updating APIs, dependencies, and examples.
• ›Adds CommonJS support for @composio/core by switching the TypeScript bundler from tsup to tsdown, with a new CommonJS example at ts/examples/cjs/.

Langfuse v3.140.0 adds batch dataset observation ingestion, Vertex AI Application Default Credentials, and a model name filter for observation widgets.

$ git clone --branch v3.140.0 https://github.com/langfuse/langfuse.git
# already have the repo? check out this version:
$ git checkout v3.140.0

• ›Adds dataset_item_version column to the dataset_run_items_rmt and events tables, enabling version-aware dataset run tracking.
• ›Adds Application Default Credentials (ADC) support for Vertex AI in LLM integrations, removing the need for explicit key configuration in GCP environments.
• ›Adds model name filter to observation widgets in the UI, allowing users to narrow dashboard views by specific model.
• ›Adds update_parallel_mode ClickHouse option passthrough for query configuration.
• ›Supports batch adding observations to a dataset in a single operation.