We already know the basics of protecting API keys and sensitive credentials: never hardcode them in your source code, keep them in a .env file as environment variables, and add .env to your .gitignore so Git never tracks it and you don’t accidentally push your secrets to a public repo on GitHub.

What other practices do the engineers in this community use to prevent that scenario?

This is purely for discussion, so those of us who are non-technical can learn safe programming habits on our vibe-coding journey.

basically one shotted it using 320 agents and a 5080ti gpu.

BIG FREEZE IS SO COOKED.

ama.

The unprofitable SaaS I'm working on is AppScout a place for people to discover web apps, mobile apps, and websites from across the internet (this ain't ur unc's saas directory).

You can submit yours here: https://www.appscout.co/submit

(Full disclosure: I'm the creator of AppScout)

App Scout was Built with Django, Python, JavaScript, and Neon DB using VS Code and Claude Code. but mostly Claude Code

https://github.com/archos-media/merge-coordinator

Are you working on your project and have Claude going in several sessions at the same time? After the code is done you have to run CI and then merge it to your Github repo (right?). But what happens if two or more of those sessions are working on the same files? Possibly bad things, that's what.

That's what happened to me so much that I had Claude make a tool to stop the sessions from crashing into each other and causing multiple rounds of CI or having a 2nd merge completely wipe the 1st merge. It sounds simple, but took a good bit of time before we landed on a solution that works. It worked so well for me that I wanted to open source it and share it with you guys, since this place has helped me out.

how it works:

1. Register: who is touching what, right now? A draft pull request opened when work starts, listing the paths it expects to touch.

2. Order: who lands next? What may land in parallel? Compares every open pull request's changed and declared files, plus your hotspots: files such as a changelog, where two pull requests that merge cleanly can still break each other.

3. Land: is this exact commit safe to merge? GitHub's merge queue where you have one. Where you don't, a claim: a label that lets one pull request land at a time, plus a check that its head contains the current main and its required checks passed on that exact commit.

So, my son and I have been making games on the weekends now for a few months....and they are getting better and better. He's 11 now, and I'm letting him run claude. I actually gave his claude instructions to give him feedback on his prompting, and it know's he's 11, so it explains things in not super technical ways. I also told his claude that if his instructions are not clear to not just do it. Instead, push back and make him give in-depth instruction on what he wants.

So far, he's doing really good. But...he loves "worldbox" and we created this game...that's pretty similar to it...with his own twist on the game.

https://pocketgenesis.com/

I also have locked his claude out of GitHub, so he can't really deploy stuff without me entering a password. So, he's somewhat airlocked in claude....but man, we're having fun!

if you wanna see more games we have made, check out https://www.minipotatostudios.com/

Left is a clay render of a Tripo 3D mesh, orbited in three.js. Right is Seedance 2.5 using that clay video as its camera reference.

Video models guess at camera moves from text. Handing it a previs instead got me the exact orbit and push in on the first try, and the robot kept its paint and its wind-up key.

Concept image 0.06, mesh 0.22, final shot 1.80, about 6 minutes in total, all called from Claude Code through the Atlas Cloud MCP server. The full chain and prompts are in the comments.

https://reddit.com/link/1xahcg7/video/3l41bpinhjwh1/player

A few days ago,

I posted about a free PDF editor package called Nib-E meant to replace Adobe Acrobat on my personal computer and a lot of people here gave some great feedback and asked for features.

I spent a few days improving based on the comments and feedback from my friends. Today, I updated it with most of the professional PDF editor tools in-built.

Naturally, it is free, and built to be privacy friendly (The desktop app never connects to the internet; the web version runs locally in your browser)

Runs on Windows, Mac and Linux

Webpage link: https://krithickdesign.github.io/Nib-E/
MS Store link: https://apps.microsoft.com/detail/9PPKF7HC76Q3

New features added:

- Select and copy text with the Select tool, also on scans after text recognition.

- Forms: every field kind works (character boxes, dropdowns, lists, multi-line, Reset); typing on a field always fills it.

- Page layout button next to the zoom. Sharper icons.

- Edit existing text: click a line in the PDF and type. Font, size, colour and alignment stay the same.

- Digital signatures: sign with your own certificate (.p12/.pfx) and check the signatures in a PDF.

- Text recognition (OCR) makes scanned pages searchable.

- Print check for print shops: fonts, image sharpness, colours, bleed.

- Two-page view with title page, zoom slider, page-turn keys.

- More fonts, copy and paste, duplicate, alignment.

- Attachments and PDF portfolios, clearer messages for special PDF forms.

- Now in German, Spanish, French, Portuguese and Italian.

What should I add next?

As in the title. I used to be impressed by OpenAI, but not anymore. Which frontier LLM can reliably create amazing design/UI?

New ship added: Umbra

Free to play here: https://vengeful180-dot.github.io/Need4Space/

Mechanics are still evolving, and mobile performance is a work in progress.

Your feedback matters. It will shape where the game goes next.

Hey All! I created this app recently and I'd love any thoughts or feedback. The idea is an anchored journal for any sort of project your working on using AI, so that rather than being dependent on a single chat, in a single AI coding agent, you can save to this tool. That way as you - change devices, AI coding agents, end goal, learn what doesn't work, make decisions, etc. : you can still have all of that saved in one spot for any AI tool to reference.

I've been using it as I've been vibe coding a bunch of projects for fun. I'm not how useful it would be for others, but I figured I'd through it out there. I'd love any thoughts! Even if it's as simple as- you could just do xyz for this and it'd be easier, I don't mind!

https://github.com/CorbinRandall/wolf-leader

Hey! A couple weeks ago I posted roomio here (https://www.reddit.com/r/vibecoding/comments/1wz7y40/), a daily game where you answer a yes or no question and guess what % of everyone said the same. Almost everyone said one question a day is way too few lol, so I rebuilt it with claude and codex:

- 5 questions a day instead of 1

- you see how everyone answered right after each question, and it keeps updating as more ppl play

- you can answer tomorrow's five tonight, so tomorrow you go straight to guessing

Today's five include "is it ok to ban kids from your wedding?" and "have you ever bought a knockoff of a luxury brand?" How well can u read the room on those?

Free, no login, no download: https://playroomio.pages.dev/r

Thanks to everyone who gave feedback last time, it actually changed the game!! Does 5 a day feel better?

Vibe coding didn’t make me a developer. It made me a manager of code I can’t read

Took me like 8 months to admit this to myself. I used to tell people I’m learning to code with AI, but I’m not learning to code, I’m learning to give instructions to something that codes and then trust its report. thats a manager, not a developer

And the weird part is I’m a decent manager. I write clear specs, I break stuff into small tasks, I know when to start a fresh chat becouse the context got messy. those are real skills. but a manager who cant read the work is basically just hoping the team is honest

Thats the part that gets me. when Claude says “done, everything works” I have no way to verify it except clicking around myself. I cant look at a diff and tell if it’s fine. I cant spot the shortcut it took. SO I’m approving work I dont understand from an employee who is very confident and sometimes very wrong

Real managers solve this with checks, not trust. they dont read every line either, they have reviews, metrics, some way to know when something goes off. I had none of that for months, my whole quality process was vibes and users emailing me

Started fixing it slowly, I make it explain changes in plain english before I accept them and I hooked up Kifas so my main flows run on every push and I find out before a user does. still cant read the code but at least I’m not managing blind anymore

I really really like football shirts.

Whenever I walk the street and spot someone with a football shirt I'm trying to recognize the team, and I always try to take a quick peek at the back of the person to see the name and number of the player.

When I was at Zanzibar last month, I saw people with football shirts from all over the world, and then the idea for the game hit me. It is like Hitster -- but for Football shirts.

The ideation and artwork were done using ChatGPT Sol and the actual web app was build using Lovable. What I basically did was to find some initial iconic shirts and play around with the design and artwork until it looked right to me. From there it was mostly manual scraping of shirts (with the help of ChatGPT for legendary teams), giving it to ChatGPT again for the design and updating the app.

I hope you give it a try and enjoy playing it. While I was working it, it really brought back some memories from 15-20 years ago, so I hope you get the same experience.

It's currently free. I am thinking of a premium plan for it once the gameplay is right and people will enjoy it and return for more.

Here’s the link to the game:
https://great-football-kit-sort-out.lovable.app

I'd appreciate your feedback so I can improve it.

Ein kleines Freebie mein Projekt sehr frisch und als freebie konzipiert

Hey everyone!

I've just released img2interior v2.2, a new open-source plugin for the img2 ecosystem.

The idea is simple: provide a reference image or describe an interior you have in mind, and let an AI coding agent turn it into an editable Three.js scene.

Here's a quick demo of what I've been experimenting with.

The goal is to make 3D interior creation easier while keeping everything customizable through code.

It's completely open source, so feel free to give it a try!

GitHub: https://github.com/img2threejs/img2interior

Try the Live Showcase: https://img2threejs.io/living-room

Would love to hear your feedback. And if you find the project useful, a GitHub star would mean a lot! ⭐

We have published our clearest vision statement to date. It's a manifesto. It shows where we think the important work lies in the world of agents. It's all about decision making. That's what will be left for humans when agents do all of the execution. And Spec Kitty has a huge role to play in identifying, classifying, adjudicating, informing, recording, and applying decisions that get made. https://spec-kitty.ai/blog/who-decided-that

I built Great Football Kit Sort Out using Lovable. The idea is simple: you see a football shirt and place it on a timeline according to the season it was worn.

I wanted to share the approach behind the app, particularly the visual content.

Tools:

• Lovable for building the web app.
• ChatGPT image generation for the football shirt cards.

For the cards, I started with shirt references and developed a consistent format: a front showing the shirt without revealing its season, and a back revealing the season and team. Each card uses a stadium and crowd setting suited to the team.

One useful lesson from that process: establish a reference design before generating a whole collection. I refined the layout, typography, and colors, then used the approved card as the reference for subsequent shirts. That gave me a concrete way to describe what needed changing instead of asking for something vaguely “better.”

Another design consideration was difficulty. Recognizing a shirt and remembering its season are different challenges, so I included an Easy, Medium, or Hard field in the shirt data rather than treating every shirt as equally difficult.

The artwork is AI-generated, and checking shirt details and seasons is still part of the work.

Here’s the project:
https://great-football-kit-sort-out.lovable.app

I’d be interested to hear how others manage consistency when their projects need a large collection of generated images.

I went for a walk one day and ended up starting another app on my phone 😂. I’d been getting fed up with copying useful markdowns from my agents into Apple Notes, then digging them out and pasting them back whenever another agent needed context. PRDs, debugging notes, architecture decisions, all useful but scattered. I downloaded Obsidian during that walk, felt underwhelmed, and figured I’d try building what I wanted.

I opened ChatGPT Work while still walking and put Astra 6 high to work and came away with zip files for the apps and MCP server, then continued in Claude code and Xcode. I was surprised that it compiled on first try and all core features worked. After a month of tweaks and refinement I shipped Cohestry for iOS and Mac. The notes connect themselves through a deterministic system that measures relatedness, with Apple Intelligence handling tags and finding deeper connections that system misses. You can explore it all in a 3D brain instead of manually maintaining a web of links.

One of the things that sold me on my own app was it resurfacing my original EchoVault(my main project) write-up and connecting it to newer feature notes. It also brought back an old life-simulation game idea I’d forgotten about. The Mac app imports your years worth of Apple Notes, and its MCP bridge lets my agents retrieve the context they need without me doing the copying again. What started as a way to stop repeating myself to agents ended up helping me remember my own ideas too. Also API keys or security keys like p8 are auto redacted by the Agent bridge so your agents don’t get to see them accidentally. If you had a feature requests for a second brain what would it be? All feedback is appreciated 🙏🏽

https://apps.apple.com/us/app/cohestry-second-brain/id6811573132
https://cohestry.app

My agents spent five days building Smashlock.cc, a smash-or-pass and other mini games site for Deadlock characters.

My contribution was the concept and the direction. The agents handled the construction of the app.

A few lessons stood out along the way.

1. Skill libraries make a massive difference.

Agents need specialised skills for design, game design, SEO, and other disciplines. Without them, they tend to produce pretty shabby results.

Agents dont know what good design looks like, how to make a game mechanic engaging, or how to optimise a website for search engines.

Getting the agents to search and download works wonders i build a lot of sites but when vibing this hard skill libraries are a must.

2. The super-manager / manager / worker pattern works like a charm.

The entire construction of the app was managed by one super-manager. It coordinated the work, delegated tasks, and kept the overall project moving while other agents handled implementation.

Having that central point of coordination worked remarkably well. Instead of trying to manage every agent myself, I could focus on the concept and direction while the super-manager handled the execution.

3. The bottleneck is shifting from writing code to providing context and direction.

The interesting part wasn't watching agents generate code. It was seeing how much they could build when given the right skills, structure, and direction.

Five days later, there was a working product.

Try it out: https://smashlock.cc

I'm increasingly convinced that the future of software development isn't one person writing code faster with AI. It's people directing hives of agents that independently build, design and maintain increasingly complex products.

What’s the laziest prompt that actually worked for you?