charles

building infrastructure and AI agents

[charles @charles_ade_8]

@coder_blvck Yes.

[charles @charles_ade_8]

@chinedu_10 Gemini 3.8 Flash can be erratic.

[charles @charles_ade_8]

@dave_zambiasi Exactly. Deterministic, repetitive workflows shouldn’t be left to agents. That’s just spending more money for less reliable results.

Use agents for judgment; use code and hooks for guarantees.

[charles @charles_ade_8]

@brendanrc2 @pavsidhu I wonder how this scales for a repo/project with tens of thousands of test cases in terms of cost and time it takes to get a PR ready for merge.

[John Da Don @jpakjr]

I solemnly swear Codex team that I will only use Luna Max if you do another reset

[charles @charles_ade_8]

@evalstate I saw the rest of the thread. Good work

[charles @charles_ade_8]

@evalstate You're welcome.

[charles @charles_ade_8]

@evalstate From the left side panel, under Build, go to Workers & Pages.

Click on the page you're interested in, go to Settings

You'll see something like this, then you can switch between prod and preview to set specific env vars.

[charles @charles_ade_8]

@rxhit05 You're not getting anything serious done with $20/mo Claude plan tbh

[charles @charles_ade_8]

@dennis_kortsch Using app to control cli

[charles @charles_ade_8]

@dduxAdventure @willsentance Fell for it 😂

[charles @charles_ade_8]

@mathias_gilson /clear

[Feross @feross]

🚨 CRITICAL: Active supply chain attack on axios -- one of npm's most depended-on packages.

The latest [email protected] now pulls in [email protected], a package that did not exist before today. This is a live compromise.

This is textbook supply chain installer malware. axios has 100M+ weekly downloads. Every npm install pulling the latest version is potentially compromised right now.

Socket AI analysis confirms this is malware. plain-crypto-js is an obfuscated dropper/loader that:

• Deobfuscates embedded payloads and operational strings at runtime
• Dynamically loads fs, os, and execSync to evade static analysis
• Executes decoded shell commands
• Stages and copies payload files into OS temp and Windows ProgramData directories
• Deletes and renames artifacts post-execution to destroy forensic evidence

If you use axios, pin your version immediately and audit your lockfiles. Do not upgrade.

[charles @charles_ade_8]

@dotta Great video, super helpful!

[charles @charles_ade_8]

Claude keeps throwing 500s, I guess it's time to call it a day.

[charles @charles_ade_8]

Yeahhhhh, that's definitely not scalable.

Two major blockers I can think of,

Sporty certainly discourages programmatic interactions with their website and their policy do not allow scraping as well.

Token cost would be astronomical.

I only see this being feasible for personal/self-host use.

[charles @charles_ade_8]

@Mr_Hy4 @echo_vick funny enough, I use this kind of setup for sporty already lol.

So yes, you can pretty much do anything. It uses chromium so the webpages get rendered correctly and agent is able to interact just the way a human would.

[charles @charles_ade_8]

@echo_vick Oh, Chowdeck definitely has a web interface. He just needs to give the agent sign in creds to his chowdeck account, viola!

chowdeck dot com btw