ovnfs

nono is an open-source agent runtime security tool from the team behind Sigstore. It uses kernel-enforced sandboxing with zero setup and low latency to protect AI agents, their tools, credentials, skills, and instruction files; it supports macOS, Linux, and Windows through WSL2 and runs as an unprivileged single binary. On Linux it uses Landlock and on macOS Seatbelt, while delegated tools can run in separate ephemeral child sandboxes with explicit filesystem, network, environment-variable, and credential permissions. Its policy system controls tool commands, domain and HTTP access, and credential use through proxy-based injection and phantom tokens. It also provides Sigstore-based supply-chain and skill attestation, cryptographic audit records, file-change snapshots and rollback, agent profiles, a registry of packaged agents, and Rust and Python FFI bindings. The project is distributed under the Apache-2.0 license.

Orca is a free, open-source agent development environment for running multiple coding agents in parallel on desktop, mobile, or a VPS. It runs CLI agents such as Codex, Claude Code, OpenCode, and Pi side by side, placing each agent in an isolated Git worktree so results can be compared and merged. The environment provides split terminals, a VS Code editor, diff annotation and review, browser-based Design Mode that sends selected HTML, CSS, and screenshots to an agent, native GitHub and Linear views, SSH worktrees with port forwarding, and a mobile companion for monitoring agents and sending follow-ups. Its CLI can script workflows such as creating worktrees, taking snapshots, clicking, and filling fields. Orca is designed to work with any coding agent that runs in a terminal and uses the user's own agent subscriptions.

devvm is a developer tool that creates an isolated Linux virtual machine for each project folder, using the project's files to detect and provision the required toolchains. It runs coding agents such as Claude Code, Codex, OpenCode, and Pi inside the VM, while preserving their settings, skills, MCP servers, and logins in a host-side store. The VMs run on Lima, mount the project at the same path as on the host by default, and use shared read-only toolchains and a reusable base image. New VMs use an allowlist network tier by default, while credentials such as GitHub and Claude Code tokens remain on the host. A clone mode gives the VM its own repository clone so changes can be reviewed before being fetched into the host repository. devvm is distributed for macOS and Linux, with installation through Homebrew or an install script, and is licensed under the MIT License.

OKF Agent Memory is a Git-native persistent memory layer for AI coding agents, developed as a pure Go CLI and library. It stores project knowledge as plain Markdown files with YAML front matter in a repository, following the vendor-neutral Open Knowledge Format (OKF) v0.2 rather than relying on an external vector database. The tooling parses and validates OKF bundles, builds an in-memory BM25 index for local lexical search, and provides progressive disclosure through hierarchical index files and link graphs. Its search-before-write workflow queries existing concepts before creating new ones; concepts can include provenance, trust tiers, lifecycle metadata, and code references for linking knowledge to source files. The standalone executable also supports creating and updating concepts, bootstrapping the memory structure into a project, and running an embedded Model Context Protocol (MCP) server over stdio for agent platforms. The repository reports sub-300-microsecond concept search and approximately 4-millisecond graph validation for its benchmark cases, with no external databases or API costs for retrieval. It is distributed under the MIT License.

nvm is a POSIX-compliant shell-based version manager for Node.js, designed for per-user installation and per-shell use. It installs, downloads, compiles, switches between, and removes Node.js versions, with support for aliases, LTS release lines, io.js, system Node.js, binary mirrors, offline installation, and migration of global npm packages. A project's .nvmrc file can specify a version that nvm uses when running commands in that project or its subdirectories. nvm is distributed as a sourced Bash script rather than an executable binary and supports POSIX shells including sh, dash, ksh, zsh, and bash on Unix, macOS, and Windows WSL; the repository also documents Docker and shell-completion setups.