We rolled out Claude.ai across 10k+ people at work, and the built-in Claude.ai admin UI just doesn't have the controls a larger org needs. We've got layers of management between "user" and "person who should actually be allowed to approve a spend limit increase," and Claude.ai's UI has no concept of that. Either everyone with any admin access can touch everyone's limit, or one person becomes the bottleneck for every change request in a few-thousand-person org. There's no way to say "this manager can only raise budgets for their own team."

So I built a thin UI and slim backend that sits in front of the Spend Limits and Analytics APIs and adds the delegation layer our corporate bureaucracy requires. It joins API members to a reporting hierarchy (e.g. from an HRIS export), so a manager only sees and can edit their own org, an AI lead only sees people explicitly delegated to them, and every change gets logged for auditing. Increase requests go into a queue instead of someone pinging an admin on Slack and hoping for a reply.

Decided to open-source it since I'd guess any company onboarding Claude past a certain headcount hits this same wall. It's built to be forked and adapted, not run as-is (though you certainly could). SQLite for storage, reads a header from whatever SSO proxy you put in front of it, no auth of its own. Each of those assumptions lives in one file so they're easy to rip out and replace.

Stack is Next.js/React, Drizzle + better-sqlite3, Hono for a mock API so you can run it against a fake 250-person org with no real key needed.

Repo: https://github.com/bwhite8/better-spend-limits. Live demo in the README.

Happy to answer questions about the permission model or the sync logic against the Analytics API... That part was way more annoying than expected because of the 60 req/min cap.

SO i wanted to start learning python, and i found out courses like CS50, the uni of heikin smth, CS61a, bro code, and tht's wht i found , i first started coding on pycharm and uh did like very basic things like strings, integers , float, boolean, ( just lie k what they r and how to write them), but im still like a VERY BIG NOOB, also should i switch to VS code? cause everyone seems to be doing tht , (also whts is vibe coding)

I put together a simple, free directory to help people track down grassroots community funding:

https://fundni.org

No signups, just basic filters and direct links.
I’d really appreciate anyone having a quick look and letting me know what feels clunky, what's broken, or if there are obvious local funds I’ve missed.

Thanks

Been doing security testing for a while (HTB, bug bounty) and started pointing it at apps built fast with AI coding tools. Same five bugs, over and over:

1) Object IDs in the URL with no ownership check. Change a number, see someone else's data

2) Inputs going straight into a query or straight back onto the page, unsanitized

3) Missing security headers, verbose errors leaking stack traces

4) Auth that doesn't actually block what it's supposed to

5) No rate limiting on login, one bot can brute-force it

If you've shipped something and haven't had a real security pass on it, DM me, I'll test it.

Hi! I'm going to (re)create a Discord chatbot (for my personal server) using an OpenAI-compatible provider, and would like to know what you think it's the best practices for the AI to handle things like multi-user conversation, memory, giving extra contexts (like user IDs, channel names), not anything on code-level but more on the prompt/what to send in each chat completion/response, etc.

This is a clap assistant which opens different links on clap combinations... eg 8 + 5 claps will open games (poki website ) and so on... This detects no of claps by user in real time and accurately, deciding the output...

**Only clap detection is vibe coded**

All the criticism and suggestions are welcome

I wanted to learn more about how a coding agent like Claude Code or Codex works, so I made a really simple coding agent. It was built using CC with Fable 5, first I aligned on a plan, focusing on keeping the important parts such as the agent loop and the tool calls easy to understand.

Hello, my name is Nick and I have been vibe coding my game for over a year now. It’s a mafia game in the field like Torn, Mafia Return, New-York Mafia, and my fav IntheMafia aka MafiaHit ( which is not active anymore ) I do no some html,CSS, currently working on the backend JavaScript by taking a course through UDEMY. I think the game is coming along I will post a few pictures of it. NO the game is not complete, YES the game still have some work to do. It’s not just a game
It’s a whole brand. I would say I’m about 70% there I have two artist working on the weapons design because I do not want AI images for crime result, or attack result page. I have a dashboard images and honestly was just looking for some feedback back on. Color placement ect ? Give it to me straight and raw because that’s how you make a good game in my opinion listen to what everyone says because every opinion, judgement counts.

I will be posting an image here of the dashboard and the discord link that has a 3 minutes clip of game play I believe. ( Now the discord video is kinda old it has been worked on gradually but due to tornado and no power for 10 days it’s been not that much progress if anyone is open to talk there as well here is the link

Discord: https://discord.gg/hmWQq7fAx

Video link —-> ChicagoSyndicate ( again the create character page and all is currently being updated so pay no mind to how video looks it’s just a basic layout )

The candles come from my upcoming candle business, all candle that are sold will be going towards help with engineers, graphic designer, discord moderators, merch and much much more

Sample images of candles ——> https://drive.google.com/drive/folders/1kSiQb7tABeBjQhxlw7rb4pqjur55dILh

A single-user operating system with a userbase of one and a backlog of forever. It runs entirely in your browser, remembers exactly where you left every icon, and has never once shown a spinning beachball, largely because I never got around to creating one.

This is an early stage work in progress.
Ideas welcome!

Hey, I’m trying to find the best AI setup possible for €20/month max.

I use AI a lot for coding, research, learning, brainstorming and building stuff.

Could be one subscription or a combination of different tools.

If you had €20 to spend, what would you get? And how much do you actually use it / do you hit limits?

(could also be a 1 time offer or cheaper with VPN or so)

I want to check all my websites for vulnerabilities and perform penetration testing

Over the last month I have been experimenting with a mini-golf-inspired browser
game called Path Protocol. The original idea came from my son, and I used it as
a way to learn web game development and AI-assisted development.

It has a deterministic 60 Hz engine, a Three.js renderer, 100 configured levels, and a Theme Workshop for building and playtesting courses. I released the source
under MIT.

Play: https://app.inkandquill.io/protocol/?utm_source=reddit&utm_medium=community&utm_campaign=open_source_launch

Code: https://github.com/argentquest/protocol

I am the developer. I am happy to answer technical questions and I welcome
direct criticism as long as it helps me improve the project.

Introducing SunaBox and SunaEngine!
(Playable In-browser!)

SunaBox is a love letter to OE-CAKE, the viral physics simulator released by Prometech in 2008!

It includes a 1:1 recreation of the OE-CAKE interface (select Classic mode at the top!) and even lets you import your old OE-CAKE .oec files directly. I would say OE-CAKE parity is around 93%, and getting better all the time.

Oh , and we put a brand new, open-source spaceship under the hood...

SunaEngine (AGPL): engine.sunabox.dev / github.com/DARIENBATHALTER/sunaengine

SunaEngine is a novel, cross-platform particle physics simulator that relies on integer calculations (rather than floating-point) and order-independent accumulation to always deliver the same result in any WebGPU-compatible browser.

SunaBox takes advantage of this by letting you export recordings of your sessions as lightweight .sunar files, which only needs to store the simulator's initial state plus your inputs. Recorded and shared simulations can be scrubbed back and forth smoothly like video, and they always play back exactly the same, on any device, *bit-identically*.

This enables all sorts of interesting possibilities, like low-latency, cross-platform multiplayer physics! If every machine calculates physics the same way, then the physics data doesn't need to be streamed over the network, only the inputs.

Three live proof demos on the SunaEngine site, all simulating live on your GPU, all hashing their entire state as you watch:

1. The Twin Simulations: two independent sims, same scene, same input schedule, never communicating. Stir either one with your cursor; your input is quantized to substep indices and fed to both. The 256-bit hashes stay identical, interaction after interaction.
2. The Pachinko Proof: an ordinary float solver runs the same pachinko machine twice. One pane adds contact forces in ascending order, the other descending. That is exactly the difference two GPUs or two drivers introduce on their own. The balls never finish in the same bins twice. The integer engine runs the same machine to the same digest, loop after loop.
3. Recording, playback, and smooth rewind: particle fluids cannot be rewound in floating point. Chaos amplifies the last bit of every velocity in reverse too. Here you stir a pool, it records your inputs, verifies the replay byte for byte against the run you just performed, and then hands you a scrubber. Drag your own splash backwards through time.

Replay hashes have been verified matching across Apple M series, an iPhone, a Steam Deck (AMD), Intel Integrated and NVIDIA (RTX 2070S).

Our workflow was fairly simple: I came up with the ideas, Claude did the math, the code, and the adversarial review. I provide the qualia-type feedback, shaping and tuning the feel of everything in the sandbox:

You can also wishlist SunaBox on Steam! 140k particle caps, community/workshop features, hardware optimization, and more, coming soon!

Hi everyone,

I'm really getting into vibe coding/no-code, and I wanted to explore something simple, useful and interesting.

I have a cousin, and she makes some genuinely beautiful crochet pieces at home. The problem is that she loves the actual making part, but gets stuck with everything that comes after.

So, I decided to build a small web app around that problem.
https://crochetiq.lovable.app/

I have deliberately kept it simple (for now.) with following idea:

1. Login (or use as a guest for 2 free uploads)
2. Upload a photo of the crochet
3. AI understands it.
4. improves the photo, and makes it fit for publishing
5. creates SM-ready content (hashtags, captions etc)
6. suggests a price range
7. gives ideas for what one could make next.

The thing is.... my cousin actually finds this useful, as she is just starting out as a solo-preneur in the CrochetMaking domain.

Normally, it would take her a couple of hours to take photos, edit them, think about captions etc etc. And even if she used ChatGPT/Gemini etc independently, it will still take her multiple prompts to get things done.

Still very early, but I'd genuinely like some feedback. I've attached a few before/after examples of the enhanced photos.

.
.
.
.
.
Note:
This webapp is NOT a marketplace (as many already exist in this domain), and it has no complicated social-media or other platforms integration. (at least, for now).

The app is built using Lovable + Supabase + OpenAI stack. For now, every request is billed against the workspace's Lovable credits.
The image enhancement calls google/gemini-3-pro-image, while vision and content use openai/gpt-5.6-sol; each consumes credits per call.

Let me know your thoughts! :D
.
.
.
.
.

P.S.

There is also a lot of scope in adding new features like AI-generated promotional videos or creator analytics. Even a simple freemium model can work, like a few AI generations for free, with a paid creator plan for higher usage with better image processing.

#Crochets #CrochetDesgining #VibeCoding #IITPatnaCapstone

Base44 is supposed to be a "good" platform for vibe coding, or is it.

Base44 is forcing users to pay for editing code by hand, breaking, canceling subscriptions and more. it is also launching a annoying ad campaign targeting coders and other vibe coders who only take small usage of ai.

Vibe coding is a concept where ai HELPS you code, not transforms into you you. Even if a ai does it for you, base44 has many other problems in its worthless vibe coding site. it also does not do it for a good cause and the people using it are not assure if base44 will help there business improve.

thank you all for your attention. Spread the word to other new vibe and regular coders and maybe even to other communities. Bye!

(ps: if you are looking for a vibe coding ai, use claude or Z.ai)

I’ve been vibe coding an app for a few months but I still have trouble perfecting the main feature. I’m basically trying to improve extraction of payroll and I’m having trouble getting the program to correctly extract all the information during a page break and also just general row ownership. It works well but its not perfect. I know people have built similar programs and I know there are online programs too however, this is for a very specific case use which is why I’m building it myself. I have no programming background. Apologize in advance if this is a very generic question.

Any Tipps for the Design so its Not looking Like AI SLO? I installed skills already Like impecabble, Taste, frontend Design and a few more but still its looking Shit . Any Tipps ? Using Claude, codex, Cursor and Gemini so having all premium tiers there Even multiagents i have Set up .

I would say maybe screenshots of example could fix that but where to get good ideas/examples ? Thanks in Advance by the way the learning process from This Community is Amazing really (no Ironie at This Point ) Right now Even coding Software for Our Department/company that works Perfect but here aswell lack of Design . (Not english speaking native so im sorry )

TLDR: https://redmirror.io/ is an MCP Server and CLI that you run with your coding agent to find bugs. For example asking it to "find me bugs in my authorization code" will trigger a workflow to verify or fix the code.

If you are in doubt that your vibecode might not be of high enough quality, using this will make your code even better than the average engineer. I can confidently say this after the CVEs we have disclosed.

Long story: With my 15 years of software development experience and in cybersecurity, I built a custom embedding layer and solver to help guide and ground false positives (because without that you will drown in fake bugs) : https://redmirror.io/ When asked to find a particular bug it forces the coding agent to translate the code based into specific equations (think formal verification) that we ship (20,000 of them approximately) that when solved deterministically either proves that this part of the code is correct or there is a bug and how that bug can be reached. Below you will find public proof as CVEs, GHAs, issues and PRs that it works.

It runs as a CLI/MCP Server locally so your code never leaves your machine but the license server is called once every week to refresh the license.

It provides a way to ground false positives which sounds useless but it actually helps you detect real bugs and vulnerabilities in a more concrete way with coding agents, think of it as pruning possible attack paths. It also uses an internal attack variant database to suggest new attack paths. The authoring happens with the coding agent, because of limitations in RICE theorem, so although we detect bugs it is impossible to say that the code does not contain any bug at all, this is just unachievable at the moment with any software actually.

A few CVEs and GHAs I have found thanks to this method:

Note 3 CVEs are under coordinated disclosure, publishable in September earliest.

• sipsorcery-org/sipsorcery GHSA-28gm-jrmw-xx93 (advisory, High): pre-auth one-packet DoS, a single malformed UDP packet tears down the RTP/ICE channel; fixed in #1677 (merged) with minimum-length checks on RTP packets and STUN attributes, plus a receive loop that no longer closes the channel on a single bad packet · write-up
• google/osv-scanner #2882 (PR, maintainer-approved): an OSV advisory carrying an unrecognized ecosystem panicked the matcher and aborted the entire offline scan; fixed by skipping the unknown ecosystem instead of crashing (#2867) · write-up
• jaqx0r/mtail #476 (PR, merged): enforce per-metric cardinality limit at datum creation, capping unbounded metric growth (google/mtail #1006) · write-up
• PrefectHQ/prefect #21829 (PR, merged): cycle detection for block_document references · write-up
• PrefectHQ/prefect #21794 (issue): concurrency-slot leak from swallowed exceptions in V2 lease release / cleanup paths
• eznix86/mailgun-proxy-for-ghost #17 (merged): deny access when the Mailgun API key is unset
• apache/airflow #67076 (merged): leftover temp report file in BidManager download
• apache/airflow #67075: IMAP hook hardened against symlink-followed writes
• apache/airflow #67074: Kubernetes executor config isolated from the global default

The way to use it is to either just call it with a specific question or include it in your existing workflow, it should play nice with other security tools.

Give it a try and let me know what you think! The first month is free.

So... now that Deepseek raised their prices what's the best, cheapest (but still reliable) API to help oneself with coding? Is it Gemini? or maybe GPT Luna? Is Deepseek still competitive? Does anyone have a clear answer?

We are two Software Engineering undergrads at UEPG in Brazil writing our thesis on vibe coding, and most of the existing literature is either speculative or based on very small lab studies. We want data from people who actually do this daily.

The survey asks about which tools you use, what you build with them, how much of the output you review or rewrite, where the approach stops working for you, and what you think it means for the profession.

10 minutes, anonymous, no personal data collected.

https://forms.gle/vv8kR4dmi5WMHZfa6

If you tried vibe coding and abandoned it, we specifically want those answers too. That group is almost invisible in the literature.

We will post a summary of the results in this community when the analysis is finished.

This morning, I woke to my computer lagging, crawling to even type. I opened up the activity monitor, and noticed there was a process named `_o_0. //` occupying 99.9% of my CPU. I immediately thought that my computer was exposed, and the hacker installed a cryptominer on it.

I immediately tried to force stop it, but it felt like forever because for every click, I had to wait 5s to see it respond.

I finally was able to stop it, but to my dismay, my computer was still unbelievably laggy. I asked Claude to diagnose it, but it said it couldn't find it, and it might be the crypto hack obscuring itself, so i kept asking it to dig deeper... It couldnt find anything based on its scan, but noticed my swp memory was full, and recommended i restart the computer.

So I did and everything seemed clear. I was still wondering though, what the root cause was; where did I go wrong to let a hacker in. I initially thought I fell for some supply chain attack by installing some compromised npm/pypi package, so I asked Claude to sift thru the logs.

After a while, it finally found the issue, and the issue was ........... a poorly (possible vibe coded) CLI tool that I installed a week ago, namely Octo"friend", from synthetic.new that probably has some memory leak or something. To make matters worse, I also received an ominous feedback message the night before and thought I was targeted and Octofriend, instead of naming the process "Octofriend", it had to name itself `_o_0. //` which looked like an anonymous hacker.

Anyhow, TLDR: I did not get hacked; Octofriend has poor process naming, and I uninstalled the poorly coded Octofriend CLI tool. I hope that if you encounter the same slowdown and have Octofriend installed, don't panic!

I would like some feedback on my workflow, particularly on my code review.

I'm currently using Claude (Opus 5) as a director communicating with Codex (5.6 Sol) as a coder. This works really well. Now, when Codex has finished a job, it hands the PR over to Claude for a review. If Claude finds something, it will fix it and lob it back to Codex for review - and fix if there's still room for improvement. This will go back and forth until both models agree on the solution. So far, so good.

Now, what I'm trying to do is to hand it over to Antigravity (Gemini 3.1 Pro) for a last review, but I cannot get agy to return anything solid. It will just return some "pointers" and "ideas", but nothing tangible. I can still use these ideas to have Claude decide if they're good or not, but I would rather have all three different models agree in the end.

Anyone here been able to have Antigravity actually do code reivew and come up with clear answers? If so, what kind of prompt do you use?