I spent most of my career doing non-technical work, and I now build our product, @HeyNews. I got there by talking to AI coding agents night after night. The catch: the agents are good company right up until 4am, when you're still hitting approve every thirty seconds and what you actually want is sleep.
So I built a loop I can walk away from and wrote up exactly how it works: https://blog.heynews.co/afk-codi...
Early on I asked Claude Code to recommend an auth setup and just went with what it suggested since I wanted to move fast. It picked a provider that was fine for the first few hundred users, but their pricing tier jumps hard once you cross a certain MAU threshold, and we hit that wall faster than expected. Now I'm staring down a migration that touches every session and password hash in the system, during a period where I really cannot afford downtime or angry users getting logged out randomly. For anyone who's picked infrastructure based on an agent's recommendation rather than researching it themselves, how did it hold up a year later? Where do you draw the line between letting the agent decide and doing the research yourself first?
Yesterday (July 21) I was at around 10% usage, and it said my limit would reset on July 25. Then a few hours later, around 00:11 on July 22, I checked again and somehow my usage had jumped back to 99% available, and now it says the next reset is July 29 instead. I m not sure whether I should be happy or confused Has this happened to anyone else? Did OpenAI change something, or is it just a weird usage tracking bug?
I m curious how others here are thinking about the last mile of vibecoded apps.
It feels like we ve crossed the first threshold: solo founders and small teams can now ship useful products much faster with Cursor, Lovable, Replit, Claude, codex, etc.
Looked at my Anthropic bill this month and it was almost 3x what I expected. Went digging and most of the overage was from long sessions where I kept feeding the same large files back into context because I forgot to trim the conversation, plus a few runs where an agent got stuck re-reading the same directory before I noticed. None of that was the model doing useful work, it was just me being sloppy with session hygiene. For people running this stuff daily, what's your actual ratio of necessary spend to spend you could have avoided with better habits? Has anyone found a workflow? such as starting fresh sessions more aggressively, summarizing before continuing, caching, that meaningfully cut this down without losing useful context?
What's the process to secure a vibe-coded app to make sure you haven't done anything silly like left your API tokens exposed in the browser or accessible via the DevTools console? Or to prevent cross site scripting attacks, or ensure forms only accept sanitized inputs that can't be used to manipulate the database. Or that your user authentication is safe and secure and no one is going to be able to login to someone else's account.
Do you hire an actual programmer or are there tools that can do it and get you to a pretty good state?
I'm a big fan of voice dictation apps. In fact, I'm using one right now to write this very post (you'll have to wait till the end to see which one I'm using )
The two main products I've used in this space are @Aqua Voice and @Wispr Flow. From talking to others, these are the two that I typically hear people mention using. In general, I hear a lot more people talk about using Wispr Flow.