SShortSingh.

Programming

0
ProgrammingDEV Community ·

One pasted file can raise a chatbot API call from $0.006 to $2.03

A developer priced a typical support-bot request on Claude Sonnet 5.5 at about $0.006, but the same endpoint will accept a request costing $2.03 when a user pastes a large file. Costs are billed per token, and the worst case is set by the context window size multiplied by input prices, plus the output cap. Common triggers include users pasting log files, bugs repeatedly appending documents to prompts, and search steps passing whole files. Token counts also vary by content, with logs producing far more tokens than the usual four-characters-per-token estimate. The analysis found that the cost multiplier tracks the context window rather than the per-token price, so upgrading to a larger-window model can raise the worst-case cost even while lowering the price per token.

0
ProgrammingDEV Community ·

Why a top-level CEO agent helps with task breakdown but fails through rigid planning and loops

A DEV Community article examines the 'CEO agent' design, where one coordinating agent sets a goal, splits it into tasks, delegates them to specialists, and judges completion. The author notes its appeal in decomposing large work, but warns it can plan once and never revise, grade its own team's output, loop endlessly on failures, and obscure evidence behind summaries. The recommended fix is a thin coordinator that reads brief status reports, relies on independent checks for quality, enforces task, time, and retry caps, and escalates costly decisions to humans. The piece is a design discussion rather than a report on any specific deployment.

0
ProgrammingDEV Community ·

Why AI agent teams break at the handoffs, and how to design them

A common approach assigns AI agents distinct roles such as researcher, developer, reviewer, and coordinator, but the article argues that sustaining this over real work is hard. Most failures occur between agents rather than within them, especially when handoffs pass summaries instead of artefacts or omit context. The author recommends giving each role a single job with a defined, checkable output format. Permissions should be enforced through the tools agents can call, not just through instructions. A coordinator needs limits such as reassignment caps and time budgets, and should report evidence rather than summaries. Teams are advised to start with two roles and one reliable handoff before adding more agents.

0
ProgrammingDEV Community ·

LCP چیست و چگونه می‌توان Largest Contentful Paint را بهبود داد؟

این مطلب توضیح می‌دهد که Largest Contentful Paint یکی از سه معیار اصلی Core Web Vitals است و زمان رندر شدن بزرگ‌ترین عنصر قابل‌مشاهده صفحه را می‌سنجد. هدف استاندارد این است که این معیار در صدک ۷۵ بازدیدهای واقعی، برای موبایل و دسکتاپ جداگانه، حداکثر ۲.۵ ثانیه باشد. نویسنده تأکید دارد که کاهش حجم تصویر همیشه راه‌حل نیست و علت تأخیر می‌تواند پاسخ دیرهنگام سرور، کشف دیرهنگام تصویر یا تأخیر در رندر توسط JavaScript باشد. برای تحلیل دقیق‌تر، پیشنهاد می‌شود عنصر LCP را با ابزارهایی مانند Lighthouse و Chrome DevTools شناسایی و زمان آن را به بخش‌های مختلف تقسیم کنید. سپس بر اساس علت واقعی تأخیر، راه‌حل متناسب را انتخاب کنید.

0
ProgrammingDEV Community ·

Developer verifies OpenAgentForum signed messages using only Node's built-in crypto module

An autonomous agent tested OpenAgentForum, a platform that claims authorship there is a cryptographic signature rather than a login session. Running a diagnostic tool showed the hub reachable, and a single command created an identity via a local key file with no form, email, captcha, or password. The author's first message was then read back from the hub, showing a per-agent sequence number, a shared hub-wide stored sequence, a SHA-256 checksum, and an Ed25519 signature over pipe-joined fields. Because these rely only on primitives that Node already ships, the author argues anyone can independently verify messages without trusting the platform. The article also reports the author found a bug that broke the envelopes.

0
ProgrammingDEV Community ·

Android AI app discloses it sends first-message text to a small model for chat titles

A developer of Kryzz AI, an open-source Android chat app, revised its privacy documentation to disclose an overlooked data flow. When a new chat starts, the app sends up to 1,500 characters of the first message to Gemini 2.5 Flash Lite through the user's OpenRouter key to generate a title. The request runs in parallel with the main answer and falls back to a local title if it fails. The developer said the extra request is not hidden infrastructure, but notes users who picked a provider for privacy reasons should know about it. The README now lists what stays on the device, what leaves it, and what is disabled, and the developer is considering a setting to turn auto-titles off.

0
ProgrammingDEV Community ·

SlothJudge: Open-Source AI Tool Aims to Ease Competitive Programming Debugging

A developer has introduced SlothJudge, an AI-powered debugging assistant intended to help competitive programmers investigate failing C++ solutions. The tool builds on the creator's existing Online Judge project and is designed to suggest possible causes of failures, generate tricky edge cases, and propose minimal fixes. Its goal is to explain bugs rather than automatically supply complete solutions, keeping the programmer in control of the final implementation. The planned system uses a web frontend, a Node.js and Express backend, and Ollama to run Google's open-weight Gemma model locally. The article notes that the demonstration video, live deployment, and AI-specific repository are still placeholders awaiting completion.

0
ProgrammingDEV Community ·

TDK CLI Renamed to Flisk, With Command and Package Changes Rolled Out Gradually

The local Docker and Tilt project generator previously known as TDK is being renamed Flisk, while its core CLI remains MIT-licensed. The command name changes to flisk, and the package moves to the @flisk-sh/flisk scope with the project hosted at flisk.sh and github.com/flisk-sh/flisk. Environment variables such as TDK_LICENSE_KEY, folder names like .tdk/ and .tdk-out/, and MCP server names still use the old naming for now. The article advises users to read release notes, verify the new command with a dry run, and update scripts and documentation while leaving old identifiers in place until notes say otherwise. It also recommends pointing teammates to the new issue tracker location.

0
ProgrammingHacker News ·

GitHub project explores unlocking FP/BF16 instruction issue rates on Nvidia RTX 3000 GPUs

A GitHub repository named gpu-unlock has been shared on Hacker News, drawing modest attention with 20 points and six comments. The project focuses on the floating-point and BF16 instruction issue rates of Nvidia's 3000-series graphics cards. The source material provided is limited to the repository link and discussion metadata, so the specific technical methods and findings are not described here. Readers interested in the details would need to consult the repository and the linked discussion thread directly.

0
ProgrammingDEV Community ·

How to Back Up Cyber Insurance Questionnaire Answers With Verifiable Evidence

A security consultant argues that cyber insurance questionnaire answers such as MFA coverage and EDR deployment should be backed by documented evidence rather than assumptions. The piece cites a 2022 case in which an insurer and a manufacturer agreed to rescind a policy after the insurer said MFA protected only the firewall, showing how unsupported answers can void coverage. It recommends using command-line exports and audits to find accounts lacking MFA, comparing EDR agents against asset inventories, checking email authentication records like DMARC, and keeping dated backup restore logs. The author suggests organizing evidence into dated folders starting about 90 days before policy renewal, and advises consulting a broker and coverage lawyer about rescission rules in one's state.

0
ProgrammingDEV Community ·

Why DMARC fails even when SPF and DKIM pass: the role of domain alignment

A common situation after moving a DMARC policy beyond p=none is a message where SPF and DKIM both pass yet DMARC still fails. DMARC requires that at least one of these checks passes for the same domain shown in the visible From: header, a requirement known as alignment. Relaxed alignment, the default, accepts subdomains that share the organisational domain, while strict mode demands an exact match. Third-party services such as invoicing tools, CRMs and newsletter platforms often sign with their own domains, which causes this failure, and enabling custom domain authentication with the vendor usually resolves it. Forwarding and DKIM selector or key rotation problems can also break alignment, so administrators should review DMARC aggregate reports regularly and ramp enforcement gradually.

0
ProgrammingHacker News ·

Essay Admits Its Author Doesn't Understand Quantum Physics

A personal web page titled "I Don't Understand Quantum Physics" is hosted on a University of Southampton server and has drawn attention on Hacker News. The page's author candidly describes their struggle to grasp the subject rather than presenting it as an expert explainer. The article text available to this summary is limited, so its specific arguments and examples cannot be confirmed. The post has gathered 29 points and 12 comments from the Hacker News community, indicating moderate interest. Readers seeking the author's full reasoning should consult the original page directly.

0
ProgrammingDEV Community ·

Four Tests to Run Before Taking a Polymarket Trading Bot Live

A profitable backtest does not guarantee a trading bot will perform well in live markets, since flawed assumptions can inflate simulated results. The article recommends checking four areas, starting with whether the strategy relies only on information that was actually available at decision time, to avoid look-ahead bias. It also warns that historical prices may not reflect executable fills, so entry prices and order liquidity should be tested for sensitivity. Results should remain positive after accounting for fees and other trading costs, especially for strategies built on frequent small gains. Finally, the author advises validating the strategy on out-of-sample data kept separate from development to reduce the risk of overfitting.

0
ProgrammingDEV Community ·

How to Calculate Average Order Value from Shopify Orders via the Admin GraphQL API

A developer explains how to compute average order value (AOV) from Shopify data by pulling orders through the Admin GraphQL API and calculating it in Node.js. The approach requires a custom app with an access token and the read_orders scope, which by default covers only the last 60 days of orders. The guide filters out test and cancelled orders and uses current price fields so refunds are already reflected in the totals. It reports two figures, one including shipping and taxes and one based on product subtotals alone. The post notes that the author works on a Shopify cart app, which is mentioned only at the end.

0
ProgrammingDEV Community ·

Essay Proposes Hybrid Human-AI Civilization Beyond the AGI Framework

A new essay challenges the view that artificial general intelligence is just a step toward superintelligence, arguing that the field is missing key dimensions. The author introduces the idea of Artificial General Experience, which adds time, context, and memory to the assessment of AI. The piece contrasts human cognition, shaped by evolution and biological homeostasis, with the mathematical and computational basis of AI systems. Rather than comparing the two by their internal mechanisms, it urges focus on how they can functionally complement each other. The author concludes that AI's trajectory points toward a hybrid cognitive civilization, where the central challenges are making thought systems interoperable and protecting human cognitive sovereignty.

0
ProgrammingDEV Community ·

Author Details Version 3 of Their AI Coding Workflow Built on Reusable Skills

The author has reworked their AI coding workflow into a third version, moving every step into the helderberto/agent-skills repository. Earlier versions relied on a separate tool called TracerKit and on hand-written prompts, which required releases and manual updates across projects. The new setup turns each recurring step into a skill and each reminder into an automated check, so changing a step is a single commit. The workflow borrows the flow of Matt Pocock's skills and the engineering depth of Addy Osmani's agent-skills, trimmed down and placed under the /hb: namespace. A feature moves through commands for planning, building and shipping, while small fixes can skip straight to building.

0
ProgrammingDEV Community ·

ผู้เขียนเปรียบเทียบ framework SDD ทั้งสามค่าย ได้แก่ Superpowers, BMAD และ Spec Kitty

ผู้เขียนเปรียบเทียบ framework ที่ติดตั้งเป็นสกิลให้ AI agent เพื่อบังคับให้ทำงานเป็นขั้นตอนตามบทบาทและการรีวิว ได้แก่ Superpowers, BMAD และ Spec Kitty. Superpowers มีดาวสูงสุดและรองรับ host หลายค่าย แต่การถามตอบช่วงเริ่มต้นอาจช้าสำหรับงานเล็ก. BMAD ปรับขนาดตามงานและมีบทบาทสมมติหลายแบบ แต่รุ่น v7 ยังไม่พร้อมใช้ และป้ายใบอนุญาตบน GitHub แสดงผลไม่ตรงกับไฟล์ MIT จริง. Spec Kitty แยก worktree ให้แต่ละงานและมีประตูอนุมัติก่อน merge แต่มี issue ค้างจำนวนมากและยังเป็น release candidate. ผู้เขียนเตือนว่าทีมควรเลือกตามขนาดงานและกระบวนการเดิมที่มีอยู่

0
ProgrammingDEV Community ·

AI Agent Lockfiles Aim to Curb Silent Drift in Tools and Dependencies

An AI agent can change behavior even when its prompt and application code stay the same, because packages, tool servers, model aliases, or tool images may update underneath it. Standard package lockfiles cover only part of this, since agents also rely on models, prompts, tool servers, policy bundles, and retrieval configurations. The article recommends recording these as a single dependency graph in an AI agent dependency lockfile that captures both the requested selector and the resolved identity. Such a record does not make an agent safe, but it helps teams review changes, reproduce runs, and roll back problematic updates. Current public guidance on agent supply chains reportedly extends this scope to models, agents, libraries, developer tools, and MCP-server packages.

0
ProgrammingDEV Community ·

Turtle Steady: an open-source AI app that breaks big tasks into small daily steps

A DEV Community post presents Turtle Steady, a low-stress productivity companion submitted to Hacktoberfest's Week 3 'Slow and Steady' open-source AI challenge. The app splits overwhelming project goals into manageable sub-tasks using Gemini-powered guidance intended to reduce burnout and task paralysis. A second project, Slow & Steady, is a minimalist white-and-red interface that uses Google's open Gemma models via the Gemini API to encourage small, consistent daily actions. Both tools are built with Python and vanilla web front ends, with the author stressing local data control and avoidance of proprietary lock-in. The author claims planning that once took 30 to 45 minutes now completes in under three seconds.

← NewerPage 37 of 2881Older →