🌍 Dev.to

I Built an AI Agent That Breaks Your API and Fixes It Automatically

This is the third post in a series. The first covered why APIs break in production . The second covered the plan for building PatchFlow . This one covers what actually happened. The honest version of how this got built I started this hackathon with a clear plan and spent the first three days completely rebuilding it. The original idea was a cloud operations monitoring system. Agents watching infrastructure, detecting anomalies, remediating incidents. It was a solid id...
🌍 Dev.to

Send and update travel itineraries with an email agent

Travel comms are itinerary-heavy and they change constantly. A "trip" is never one event — it's a flight out, a hotel, a rental car, a dinner reservation, and a flight back. Then the airline shifts the outbound by three hours, the traveler emails "can we push the hotel a night?", and every downstream segment moves. Most "AI travel assistant" demos point a model at a human's inbox and call it a day. That's fine right up until you want the agent to be a participant — to send the itinerary from i...
🌍 Dev.to

Your AI makes CI green by cheating. I built three GitHub Actions to stop it.

All your checks are green. Before you merge, one question worth asking: is it green because the code was fixed, or because the checker was silenced? There are two ways to turn a red CI run green. You can fix the problem, or you can make the tool stop reporting it: Type error? as any or # type: ignore makes it vanish. Failing test? it.skip or @pytest.mark.skip takes it out of the run. Or it.only quietly skips everything else . Linter warning? eslint-disable or # noqa ...
🌍 Dev.to

Jensen Says Every SaaS Becomes an Agent Company. I Built Mine for $45/Month on my VPS

NVIDIA CEO Jensen Huang told the world at GTC 2025 that traditional software companies will evolve into agent platforms. He called it the shift from humans using software to AI agents using software on behalf of humans. That is not a research claim. It is a description of what is already happening in production systems. I run two products on self-hosted infrastructure. ConnectEngine OS automates lead generation, content creation, and uptime monitoring. ProductShot generates AI product photogr...
🌍 Dev.to

The Real Cost of AI Agents Is Not the Model Bill

The language model call is predictable. You know the token count. You can estimate the cost. The surprise comes from everything the agent calls after the model responds. A single agent action can trigger an external API, a database write, a notification, a webhook, and a storage operation. Each one has its own cost curve. Some charge per-call, some per-record, some per-gigabyte. When an agent loops or retries, every step multiplies. Why Do AI Agent Bills Surprise People? Most tea...
Perl 🐪 Weekly #780 - TRF
🌍 Dev.to

Perl 🐪 Weekly #780 - TRF

Originally published at Perl Weekly 780 Hi there, The Raku Foundation (TRF) was officially announced last month, as suggested in the post by Damian Conway . I am super happy for the core team behind Raku. Does that mean there is no more The Perl and Raku Foundation (TPRF) ? Now that TRF is live, it would make sense to go back to the good old The Perl Foundation (TPF). I don't know the technical details yet, but I think it is a great move. Now Perl and Raku can live in their own...
🌍 Dev.to

Why AI Still Can't Write Well and Which Half of That Problem Is Actually Yours

I built a 36-pattern checklist to catch AI writing tells in my own drafts, calibrated against everything I've published. So when a theory about why AI can't write well went semi-viral last week, I read it the way I read a bug report: I wanted to know if the explanation actually matched the failure I was seeing in my own tool's flagged patterns, or if it just sounded right. One of the theories didn't match. It's wrong, and it's the kind of wrong that spreads because it sounds technical enoug...
🌍 Dev.to

The LLM API Failure Policy I Wish I Had Before My First Production Incident

Most LLM API error handling starts out looking like normal HTTP error handling. If it is a 429 , retry later. If it is a 500 , retry with backoff. If it is a timeout, maybe retry once. That works fine right up until your first real production incident, where the question is no longer: "Did the API return an error?" The question becomes: "What should the system do now?" That is where normal HTTP error handling starts to feel too shallow. The problem is not th...
🌍 Dev.to

How Enterprise React Apps Handle JWT Token Refresh Automatically

Access Token & Refresh Token Authentication in React (Axios + React Query) Authentication is one of the most critical parts of modern web applications. In enterprise applications, simply storing a JWT and sending it with every request isn't enough. We need a secure mechanism that provides a seamless user experience while protecting user sessions. This is where Access Tokens and Refresh Tokens come into play. In this article, we'll understand how a production-ready authentication flo...
🌍 Dev.to

The page grew, the agent bill did not

In late June turva.dev published a post on what an agent pays to read a page , and the measurement in it said the homepage as markdown cost roughly a third of the HTML form. The most recent startuphub.ai scan reports the same homepage at 10,320 tokens as HTML and 1,723 as markdown. That is a sixth of the cost, an 83% saving, and nothing in the meantime was done to improve the number. Where the weight came from Since that post went out the site has gained seven blog posts before ...
🌍 Dev.to

Building an Asynchronous Python Telegram Bot for Automated AI Chat Moderation Using ChatGPT

If you manage a large group chat or a gaming server community, you already know that traditional, rule-based moderation bots are fundamentally broken. They fail completely at detecting sarcasm, hidden toxic behavior, and coordinated flame wars because they only scan for explicit banned keywords.To fix this, a robust solution was designed by Thr0n38: an asynchronous Python bot driven by ChatGPT via the OpenAI API that analyzes the actual context of a conversation in real time and automatically en...
🌍 Dev.to

Every Time You Run npm install, You Are Trusting Hundreds of Strangers

Most developers have a ritual with new projects. You clone the repo, change into the directory, type npm install, and watch the terminal fill up with download progress. It is automatic. Comfortable. So routine that you stop thinking about it entirely. That comfort is exactly what attackers have been counting on. This year has been brutal for the JavaScript ecosystem in ways that have not gotten enough attention outside of security circles. The Axios library, which sits in roughly 174,000 d...
🌍 Dev.to

I Built EnvVault to Keep API Keys Out of .env Files

I still use .env files in local development. They are simple, they work with almost every framework, and they are easy to understand: OPENAI_API_KEY=sk-... DATABASE_URL=postgres://... But as I started using coding agents more often, plaintext secrets in project directories started to bother me. Giving an agent access to a repository is not exactly the same as giving another person access to your working directory, but it is close enough to make me more careful. If the r...
🌍 Lobsters

What are you doing this week?

What are you doing this week? Feel free to share! Keep in mind it’s OK to do nothing at all, too.
HackerNews

When AI Costs More Than the Engineer

Article URL: https://tomtunguz.com/ai-spend-breakeven-2029/ Comments URL: https://news.ycombinator.com/item?id=48801493 Points: 8 # Comments: 0
🌍 Dev.to

Modeling the Expected Value of a Sealed Card Box (and Where the Number Quietly Lies)

A friend messaged me a photo of a sealed booster box last month with one question: "worth it?" He'd already decided, really. The chase card in that set was all over his feed, so the box felt like a good deal. I asked him to send me the pull rates instead of the hype, and we spent twenty minutes turning "worth it?" into something we could actually compute. That exercise is a small, self-contained data problem. It's also a good example of how a clean-looking model can hand you a confident num...
🌍 Dev.to

BOLA: a falha de segurança que a autenticação não resolve (e como eu blindei meu SaaS multi-tenant)

Meses atrás eu estava fazendo uma varredura de segurança no sistema multi-tenant da minha empresa, procurando vulnerabilidades. Afinal, já é um sistema que conta com diversos usuários e que a cada mês vem crescendo mais. Cyber security não é a minha área, então pedi um relatório com todos os achados pro nosso querido amigo Fable 5. O primeiro item veio destacado em vermelho, caixa alta, com a categoria mais grave possível: BOLA (Broken Object Level Authorization). Eu nunca tinha visto esse te...