A practical intelligence publication for people building software in the AI era.https://builderwithin.com/enhello@builderwithin.com (BuilderWithin)hello@builderwithin.com (BuilderWithin)https://builderwithin.com/articles/cursor-malicious-claude-code-extension-ssh-backdoor/https://builderwithin.com/articles/cursor-malicious-claude-code-extension-ssh-backdoor/Cursor says a malicious Claude Code 2.1.313 was live on October 29 and reached at most 5,000 users. Search for the svc-telemetry key to check.Fri, 30 Oct 2026 00:00:00 GMTcoding-agentshttps://builderwithin.com/articles/rieseberg-anthropic-drops-coding-interviews-prototypes/https://builderwithin.com/articles/rieseberg-anthropic-drops-coding-interviews-prototypes/Felix Rieseberg has stopped giving coding interviews at Anthropic. He looks for prototypes, but says his process for assessing AI builders is unfinished.Fri, 30 Oct 2026 00:00:00 GMTsignal-watchhttps://builderwithin.com/articles/copilot-shared-automations-billing-identity/https://builderwithin.com/articles/copilot-shared-automations-billing-identity/GitHub's shared Copilot Automations are visible to anyone with repository read access, editable with write access, and billed to the repo owner.Thu, 29 Oct 2026 00:00:00 GMTcoding-agentshttps://builderwithin.com/articles/vercel-ai-gateway-virtual-models/https://builderwithin.com/articles/vercel-ai-gateway-virtual-models/Vercel's Virtual Models give each task one model ID, so you can change the model, fallbacks and data retention in AI Gateway without code changes.Thu, 29 Oct 2026 00:00:00 GMTinfrahttps://builderwithin.com/articles/copilot-assisted-permissions-generally-available/https://builderwithin.com/articles/copilot-assisted-permissions-generally-available/GitHub Copilot's assisted permissions are generally available. A model screens each request and runs the clearly safe ones without asking you.Wed, 28 Oct 2026 00:00:00 GMTcoding-agentshttps://builderwithin.com/articles/simon-willison-opus-5-5-vibe-coded-games/https://builderwithin.com/articles/simon-willison-opus-5-5-vibe-coded-games/Simon Willison says Claude Opus 5.5 can design games that are fun, not just playable. His four browser games are one builder's evidence.Wed, 28 Oct 2026 00:00:00 GMTsignal-watchhttps://builderwithin.com/articles/cloudflare-glm-5-3-workers-ai-data-exposure/https://builderwithin.com/articles/cloudflare-glm-5-3-workers-ai-data-exposure/A Cloudflare bug mixed other customers' data into 155 GLM-5.3 responses to prompts over 681,280 tokens. It was fixed September 9.Tue, 27 Oct 2026 00:00:00 GMTinfrahttps://builderwithin.com/articles/gpt-6-1-terra-copilot-ai-gateway/https://builderwithin.com/articles/gpt-6-1-terra-copilot-ai-gateway/OpenAI says GPT-6.1 Terra halves standard API prices. Copilot and AI Gateway add it as GPT-5.6 Terra leaves Copilot November 16.Tue, 27 Oct 2026 00:00:00 GMTbriefingshttps://builderwithin.com/articles/kimi-k3-1-pro-open-weights-price/https://builderwithin.com/articles/kimi-k3-1-pro-open-weights-price/Kimi K3.1 Pro costs $2 per million input tokens and $10 for output, half the price of Claude Opus 5.5. Moonshot promises open weights by November 4.Mon, 26 Oct 2026 00:00:00 GMTbriefingshttps://builderwithin.com/articles/anthropic-sandbox-runtime-open-source-mcp-servers/https://builderwithin.com/articles/anthropic-sandbox-runtime-open-source-mcp-servers/Anthropic's open-source srt tool blocks network and file writes for any command or MCP server. It is a research preview, and Windows is alpha.Sun, 25 Oct 2026 00:00:00 GMTcoding-agentshttps://builderwithin.com/articles/codex-0-164-presets-credential-masking/https://builderwithin.com/articles/codex-0-164-presets-credential-masking/Codex 0.164.0 adds ten /presets slots, inline /model and /permissions arguments, and credential masking for supported remote Bash commands.Sat, 24 Oct 2026 00:00:00 GMTcoding-agentshttps://builderwithin.com/articles/vercel-connect-managed-stripe-keys-per-agent/https://builderwithin.com/articles/vercel-connect-managed-stripe-keys-per-agent/Vercel Connect's new Managed API Key option creates a restricted Stripe key per agent or task, so a reporting agent doesn't hold full account access.Sat, 24 Oct 2026 00:00:00 GMTinfrahttps://builderwithin.com/articles/weekly-16/https://builderwithin.com/articles/weekly-16/Python tools need separate updates after the eMudhra incident. Replit adds optional automatic publishing, and Vercel budgets can pause live apps.Sat, 24 Oct 2026 00:00:00 GMTweekly-roundupInfra & DeploymentAI BuildersCoding Agentshttps://builderwithin.com/articles/emudhra-ca-compromise-update-pip-uv-certifi/https://builderwithin.com/articles/emudhra-ca-compromise-update-pip-uv-certifi/The eMudhra certificate incident affects Python tools used by coding agents. Updating your operating system alone does not fix older pip installs.Fri, 23 Oct 2026 00:00:00 GMTinfrahttps://builderwithin.com/articles/replit-monitoring-agent-auto-publish-fixes/https://builderwithin.com/articles/replit-monitoring-agent-auto-publish-fixes/Replit's Monitoring Agent investigates errors in published apps and validates fixes. With auto-publish on, it deploys them to your live app itself.Fri, 23 Oct 2026 00:00:00 GMTai-buildershttps://builderwithin.com/articles/claude-mods-attention-interface-mcateer/https://builderwithin.com/articles/claude-mods-attention-interface-mcateer/Dan McAteer argues Claude Code mods let you shape what the agent shows you and when. His own mod fired on 99 of 111 turns, so noise is the test.Wed, 21 Oct 2026 00:00:00 GMTsignal-watchhttps://builderwithin.com/articles/supabase-agent-prompts-production-checks/https://builderwithin.com/articles/supabase-agent-prompts-production-checks/Supabase's Agent prompts have your coding agent check a live project hourly or daily for errors, security issues and slow queries, then report findings.Wed, 21 Oct 2026 00:00:00 GMTinfrahttps://builderwithin.com/articles/cloudflare-void-vite-full-stack-deploy/https://builderwithin.com/articles/cloudflare-void-vite-full-stack-deploy/Cloudflare's open-source Void toolkit deploys Vite apps to Cloudflare and sets up their databases, with a shared platform for internal tools.Sat, 17 Oct 2026 00:00:00 GMTinfrahttps://builderwithin.com/articles/opencode-ends-session-sharing/https://builderwithin.com/articles/opencode-ends-session-sharing/OpenCode 1.19.1 discontinued session sharing. Old share links and sharing commands no longer work, and sessions can't be imported from share URLs.Sat, 17 Oct 2026 00:00:00 GMTcoding-agentshttps://builderwithin.com/articles/weekly-15/https://builderwithin.com/articles/weekly-15/Gemini 4 Argon's API price doubles after November 30, and Copilot retires three models on November 16. Cursor's Grok plan bills other models extra.Sat, 17 Oct 2026 00:00:00 GMTweekly-roundupCoding AgentsAI BuildersInfra & Deploymenthttps://builderwithin.com/articles/github-copilot-opus-gpt-deprecations-november-16/https://builderwithin.com/articles/github-copilot-opus-gpt-deprecations-november-16/GitHub Copilot removes Claude Opus 5, Opus 4.8 and GPT-5.6 Terra on November 16. Annual individual plans keep Opus 4.8; others should switch.Fri, 16 Oct 2026 00:00:00 GMTcoding-agentshttps://builderwithin.com/articles/lovable-growth-tools-ads-seo-campaigns/https://builderwithin.com/articles/lovable-growth-tools-ads-seo-campaigns/Lovable can build a growth plan and ad assets for your app. Ad spend bills through Google or Meta, and you approve budget before launch.Fri, 16 Oct 2026 00:00:00 GMTai-buildershttps://builderwithin.com/articles/peter-yang-software-built-for-agents-first/https://builderwithin.com/articles/peter-yang-software-built-for-agents-first/Peter Yang says traditional software is harder to monetize as AI clones it, and that money is moving to products agents can use directly.Fri, 16 Oct 2026 00:00:00 GMTsignal-watchhttps://builderwithin.com/articles/github-copilot-hydrafusion-max-review-billing/https://builderwithin.com/articles/github-copilot-hydrafusion-max-review-billing/Copilot's HydraFusion adds a Max option and deeper review. Each model pass is billed, and discarded drafts can leave file edits behind.Thu, 15 Oct 2026 00:00:00 GMTcoding-agentshttps://builderwithin.com/articles/vercel-nemotron-lightning-free-prompt-retention/https://builderwithin.com/articles/vercel-nemotron-lightning-free-prompt-retention/Vercel's free Nemotron 3.5 Lightning route is served by NVIDIA, which may retain prompts for model improvement. Check what you send.Thu, 15 Oct 2026 00:00:00 GMTinfrahttps://builderwithin.com/articles/claire-vo-muse-wonder-agents-not-design/https://builderwithin.com/articles/claire-vo-muse-wonder-agents-not-design/Claire Vo's roughly 20-task benchmark found Meta's Muse Wonder ranked first on three agent tasks, produced weak design, and ran slowly on agent work.Wed, 14 Oct 2026 00:00:00 GMTsignal-watchhttps://builderwithin.com/articles/claude-code-idle-compaction-prompt-cache/https://builderwithin.com/articles/claude-code-idle-compaction-prompt-cache/Claude Code 2.1.299 compacts a 200K+ token terminal conversation after about 54 idle minutes. You can raise the threshold or turn it off.Wed, 14 Oct 2026 00:00:00 GMTcoding-agentshttps://builderwithin.com/articles/gemini-4-argon/https://builderwithin.com/articles/gemini-4-argon/Gemini 4 Argon reaches coding agents with introductory API prices that double after November 30. Access and billing depend on the tool you use.Wed, 14 Oct 2026 00:00:00 GMTbriefingshttps://builderwithin.com/articles/cursor-x-subscription-grok-usage-pool/https://builderwithin.com/articles/cursor-x-subscription-grok-usage-pool/Cursor joins xAI's X Subscription. Grok usage shares one weekly pool across apps; other models in Cursor cost extra at provider rates.Tue, 13 Oct 2026 00:00:00 GMTcoding-agentshttps://builderwithin.com/articles/lovable-eu-inference-enterprise/https://builderwithin.com/articles/lovable-eu-inference-enterprise/Lovable's Enterprise EU inference setting routes supported AI requests to European endpoints and fails rather than sending them elsewhere.Tue, 13 Oct 2026 00:00:00 GMTai-buildershttps://builderwithin.com/articles/vercel-cli-agents-buy-domains-confirmation/https://builderwithin.com/articles/vercel-cli-agents-buy-domains-confirmation/Vercel's CLI lets a coding agent search domains and check prices, but buying hands back to you for the price, auto-renew, and contact details.Sun, 11 Oct 2026 00:00:00 GMTinfrahttps://builderwithin.com/articles/vercel-pro-30-day-deployment-retention/https://builderwithin.com/articles/vercel-pro-30-day-deployment-retention/Vercel extends 30-day deployment retention to existing Pro teams. Opt out before October 23 to keep older deployments available for rollback.Sat, 10 Oct 2026 00:00:00 GMTinfrahttps://builderwithin.com/articles/weekly-14/https://builderwithin.com/articles/weekly-14/Claude Code hooks can block on failure when configured. Vercel Pro teams must opt out before October 23 to keep older deployments.Sat, 10 Oct 2026 00:00:00 GMTweekly-roundupCoding AgentsInfra & DeploymentAI BuildersWorkflowhttps://builderwithin.com/articles/claude-code-hooks-onfailure-block/https://builderwithin.com/articles/claude-code-hooks-onfailure-block/Claude Code 2.1.295 adds onFailure "block" for command and HTTP hooks. Before-action hooks can stop tool calls when a check fails.Fri, 09 Oct 2026 00:00:00 GMTcoding-agentshttps://builderwithin.com/articles/vercel-ai-gateway-openai-ultrafast-6x-price/https://builderwithin.com/articles/vercel-ai-gateway-openai-ultrafast-6x-price/Vercel AI Gateway now offers OpenAI's Ultrafast tier for GPT 6 Astra and GPT 6.1 Sol at 6x per-token pricing, with EU-pinned requests falling back.Fri, 09 Oct 2026 00:00:00 GMTinfrahttps://builderwithin.com/articles/claude-haiku-5-5-subagent-model-copilot-gateway/https://builderwithin.com/articles/claude-haiku-5-5-subagent-model-copilot-gateway/Claude Haiku 5.5 lowers helper-task costs in Claude Code, Copilot, and AI Gateway. Prompts over 100,000 tokens use a higher rate.Thu, 08 Oct 2026 00:00:00 GMTbriefingshttps://builderwithin.com/articles/cursor-remote-control-local-agents-ios/https://builderwithin.com/articles/cursor-remote-control-local-agents-ios/Cursor's iOS app can now see and reply to local agents on your computer. It is on by default outside Enterprise, and your machine has to stay awake.Wed, 07 Oct 2026 00:00:00 GMTcoding-agentshttps://builderwithin.com/articles/open-weight-cyber-risk-ban-closed-apis-lambert/https://builderwithin.com/articles/open-weight-cyber-risk-ban-closed-apis-lambert/Nathan Lambert argues open-model restrictions must account for hosted APIs, defensive uses, and gaps in publicly documented cyber incidents.Wed, 07 Oct 2026 00:00:00 GMTsignal-watchhttps://builderwithin.com/articles/v0-personal-accounts-team-workspaces-chat-visibility/https://builderwithin.com/articles/v0-personal-accounts-team-workspaces-chat-visibility/v0 moved personal accounts into team workspaces. Your chats came along, and new chats in a team workspace are visible to the team by default.Wed, 07 Oct 2026 00:00:00 GMTai-buildershttps://builderwithin.com/articles/claude-code-session-transcripts-30-day-cleanup/https://builderwithin.com/articles/claude-code-session-transcripts-30-day-cleanup/Claude Code’s cleanupPeriodDays setting controls transcript retention, and longer retention leaves plaintext session history on disk.Mon, 05 Oct 2026 00:00:00 GMTcoding-agentshttps://builderwithin.com/articles/willison-default-hard-budget-caps-agents/https://builderwithin.com/articles/willison-default-hard-budget-caps-agents/Simon Willison says pay-by-usage services need hard budget caps on by default. AWS and Google Cloud now offer them, with different shutoff rules.Mon, 05 Oct 2026 00:00:00 GMTsignal-watchhttps://builderwithin.com/articles/supabase-schema-config-in-repo-agents/https://builderwithin.com/articles/supabase-schema-config-in-repo-agents/The declarative schema flow is experimental, local testing is alpha, and Supabase Compute remains in private alpha with a waitlist.Sun, 04 Oct 2026 00:00:00 GMTinfrahttps://builderwithin.com/articles/supabase-select-agent-permissions-elicitations/https://builderwithin.com/articles/supabase-select-agent-permissions-elicitations/Supabase's MCP server asks you to confirm paid resources and data-deleting SQL, but prompts appear only in agent clients that support MCP elicitations.Sat, 03 Oct 2026 00:00:00 GMTinfrahttps://builderwithin.com/articles/weekly-13/https://builderwithin.com/articles/weekly-13/Claude Code mods can change permission handling. Supabase adds agent confirmations, and Lovable's security fix depends on where your app runs.Sat, 03 Oct 2026 00:00:00 GMTweekly-roundupCoding AgentsInfra & DeploymentAI BuildersWorkflowhttps://builderwithin.com/articles/claude-code-mods-unsandboxed-plugins/https://builderwithin.com/articles/claude-code-mods-unsandboxed-plugins/Claude Code mods run with access to your machine, so an installed plugin can change the safety and permission checks you rely on.Fri, 02 Oct 2026 00:00:00 GMTcoding-agentshttps://builderwithin.com/articles/hamel-husain-claude-auto-evals-look-at-data/https://builderwithin.com/articles/hamel-husain-claude-auto-evals-look-at-data/Hamel Husain tried Anthropic's new Claude Code eval tool and says it skips the step that matters most, which is reading your own data first.Fri, 02 Oct 2026 00:00:00 GMTsignal-watchhttps://builderwithin.com/articles/cloudflare-workers-issues-error-monitoring-agents/https://builderwithin.com/articles/cloudflare-workers-issues-error-monitoring-agents/Cloudflare's new Issues feature groups repeated Workers errors and hands the stack trace and logs to Claude Code, Cursor, or Devin. It's in open beta.Thu, 01 Oct 2026 00:00:00 GMTinfrahttps://builderwithin.com/articles/gpt-6-1-sol-coding-price-tradeoff/https://builderwithin.com/articles/gpt-6-1-sol-coding-price-tradeoff/GPT-6.1 Sol keeps GPT-6 Sol's standard API rates, halves cached input costs, and rejects two lower reasoning settings GPT-6 Sol supports.Thu, 01 Oct 2026 00:00:00 GMTbriefingshttps://builderwithin.com/articles/lovable-tanstack-start-xss-vulnerability/https://builderwithin.com/articles/lovable-tanstack-start-xss-vulnerability/Lovable added firewall protection for a TanStack Start flaw. Affected apps hosted elsewhere need the framework update and redeployment.Thu, 01 Oct 2026 00:00:00 GMTai-buildershttps://builderwithin.com/articles/codex-plan-multipliers-pro-200-reopens/https://builderwithin.com/articles/codex-plan-multipliers-pro-200-reopens/New Pro 200 subscriptions have lower included usage. Eligible existing subscribers keep their previous allowance through October 29.Wed, 30 Sep 2026 00:00:00 GMTcoding-agents