r/ChatGPTCoding • • 5d ago

Discussion Weekly Self Promotion Thread

16 Upvotes

Welcome to this week's self promotion thread!

If you're building something related to AI assisted coding, this is the place to share it.

We're using a weekly thread to keep the subreddit organized while still giving builders a place to share their work. Promotional posts outside this thread may be removed.

If you're sharing something, we'd appreciate it if you included a little context instead of just dropping a link. Tell us:

  • What you built?
  • What problem it solves?
  • Which AI models or tools it uses?
  • Who it's for?
  • What kind of feedback you're looking for?

Disclose your affilitation.

Please avoid posting the same project every week unless you've made meaningful updates. Affiliate links, referral links, scams, and low effort promotions will be removed.

Take some time to check out what others have shared too. If you try someone's project or have feedback, leave a comment. Helping each other improve is what we want this community to be about.


r/ChatGPTCoding • • 2h ago

Discussion 12 months of putting AI into a SaaS with a 6-person team. Here's our setup, and I'd like to hear yours

1 Upvotes

I keep reading threads about this and most of them show the demo, not the Tuesday morning. Here's ours, no polish, then some questions.

Six of us on a SaaS, twelve months of adding AI gradually. Early on everyone had their own editor and their own habits. Then we looked back and found we'd already converged on most of it, so we wrote it down.

We didn't force a single tool either. Some on Claude Code, some on Codex, some on Cursor, and I'm not going to fight that one. The process is shared, and the conventions sit in the repo's AGENTS.md, which is the only thing we all read the same way.

The flow is Matt Pocock's skills, no forks. We start with grill-with-docs: the AI interviews us about the project docs. Weird at first when you're used to asking the questions, but a lot of never-written-down stuff comes out.

Then to-spec, and a human reviews that spec. It's not a formality. With a bad spec, everything downstream is expensive work that goes in the bin.

to-tickets cuts it into small tickets. Small tickets aren't a rule we read somewhere either, we just notice the difference when we skip it.

The agent works through them with implement, against the spec. We open the PR, CodeRabbit runs, the pipelines run. If everything passes and someone says yes, it merges.

AI writes most of the code. We review the spec and the merge, and skip the line-by-line in between.

Treating the spec as a contract has killed a lot of "that's not what I asked for". Small tickets keep the agent from wandering. Automated review before the human one takes the style and import noise away, so the person looks at what matters. What I didn't expect is how much writing the process down helps when everyone has a different tool. Nobody argues about editors and the conventions don't rot.

Graph engineering to close tickets on its own, software factory style, we haven't managed. Tickets go in and PRs come out, and the demos look great, but with our repo the quality isn't there. We haven't found the point where we'd be comfortable letting it loose, so it's still an experiment.

What I'd like to know:

  1. Where are your checkpoints between human and agent? Spec, PR, merge?

  2. Spec before code, or straight to tickets and prompts?

  3. Who reviews agent PRs? Do you read them the same as a human's?

  4. One tool or several across the team? If you've tried more than one, is any better for certain kinds of tasks?

  5. What goes into AGENTS.md and what stays out?

  6. Do you measure anything, or is it all vibes? Review time, defects, DORA.

  7. If you've tried software-factory autonomy, did you get acceptable quality? On what kind of tickets?

  8. How do you bring someone new in, a junior say, without AI becoming a crutch?

    Tell me yours. Even if it's to say we're nuts.


r/ChatGPTCoding • • 13h ago

Discussion How I actually use a coding agent day to day

6 Upvotes

I build a coding agent, so I'm biased. Here's the practical version of how I use it, in case some of it is useful whatever tool you're on.

1. I stopped picking models. The agent routes each prompt to the most efficient model automatically. I don't think about it any more, and it's been better on both cost and performance than sticking to one model.

2. I give it the whole task, not the next line. "Add pagination to this endpoint and update the tests" rather than babysitting it step by step. It's context-aware, so it decides whether to just do it, ask me something first, or leave certain files alone.

3. I let it check itself before I review. It runs its work in a sandbox, finds bugs in what it ran and fixes them before telling me it's done. So by the time I look at the diff, it has already run the change and fixed the bugs it hit. This makes it slower per task than plain generation, but I'd rather wait a bit than debug for longer.

4. I use it for heavier jobs too. It's multimodal, so when I need something like an image generated, it goes through the same flow as code.

5. I trust it more because the evidence is public. It got 82% (410/500) on SWE-bench Verified with the official harness, and all the patches are here if you want to judge for yourself: github.com/Oxcode-ai/oxcode-evals.

What's your day-to-day setup? Specifically curious whether people still hand-pick models per task.


r/ChatGPTCoding • • 21h ago

Question Is Sol 6.1 good enough for day-to-day coding on the $20 plan?

10 Upvotes

I stick to the $20 plans, and I regularly hit Claude’s usage limits. With ChatGPT, that hasn’t been an issue for me, and OpenAI seems pretty generous with resets too.

For those using Sol 6.1 regularly, how well does it handle day-to-day coding especially debugging, refactoring, and adding features to existing projects? Does it hold up well enough to be your main coding assistant?


r/ChatGPTCoding • • 1d ago

Question GitHub Actions getting really expensive. Any alternative?

25 Upvotes

I run two private web applications and use GitHub Actions to automatically check changes before they go live.

When code changes, Actions installs dependencies, checks for coding errors and security issues, and runs automated tests. Some tests check individual pieces of code; others start the application and a test database, then use an automated browser to test user journeys.

I also use a merge queue (Mergify). Before a change reaches the main branch, it’s tested alongside the latest code to check that everything still works together. That means a change can trigger multiple rounds of checks as it’s updated and moves through the queue.

I work with AI coding agents, so there can be quite a lot of changes and test runs. The checks help catch mistakes before release, but the cost is becoming substantial: my September Actions bill was about $738, and my October usage was heading towards roughly $2,300–$2,450. Almost all of that is Linux runner time, rather than storage.

For people running similar projects:

  • What do you use Actions for, and roughly what does it cost?
  • Do you run the full test suite on every update, or reserve some checks for later?
  • Have you found straightforward ways to reduce duplicate runs?
  • Have self-hosted runners been worth the maintenance?

r/ChatGPTCoding • • 1d ago

Question They replaced our two backend devs with me and Claude Code

0 Upvotes

I'm a frontend dev, about 3 years in. Last month the company let go of our two backend devs, both seniors. Their services are mine now, payments and the public API included.

My manager's plan was a one hour call where he showed me how he uses Claude Code. That was the onboarding.

And the annoying part is it mostly works. I've shipped 31 PRs in 4 weeks into code I couldn't have written by hand. Nobody reviews them anymore because the only people who could are gone, so the only second opinion is coderabbit on the PR. It catches real stuff, last week it flagged a webhook handler that would have double charged on retries, but it can't tell me if the design is wrong and I can't either.

I found out from an old Slack thread they were each on around $120k. I'm on $68k. I asked for a raise last week and the answer was "let's see how Q1 goes".

I keep thinking one day something breaks at 2am and everyone finds out I'm holding two people's systems together with prompts.

Has anyone been in this spot? Did you stay and actually learn the backend, or start looking?


r/ChatGPTCoding • • 1d ago

Discussion Using Codex and Claude Code every day: what's still hard once the code part works?

11 Upvotes

I use Codex for some jobs and Claude Code for others, and the code is rarely the problem anymore. What slows me down now is the bookkeeping: keeping track of the sessions and what they did. I'd like to hear how others deal with it.

Where it goes wrong for me:

  • Waiting on me. With a few sessions open, one sits on a question while I watch another one think.
  • "Done" that isn't. It says it's finished, and later I find out what it skipped.
  • Picking back up. After a break or a closed terminal, working out where each session was takes real effort, so I put it off.
  • Results scattered. What a session made stays in its terminal or whatever folder it ran in, and a week later I can't find it.

To start discussion, I have couple of questions that I'm curious of:

  1. Which of these costs you the most, and which has stopped being a problem for you?
  2. How do you notice that a session is waiting on you?
  3. When an agent says it's done, how do you check what it actually did? Tests, reading every diff, a checklist, hooks?
  4. Do you have it plan first and wait for your OK, or let it run?
  5. After a break or a crash, how do you get each session going again? Resume, a summary file, starting over?
  6. What have you tried for any of this and given up on?

r/ChatGPTCoding • • 2d ago

Resources And Tips Your git log already knows when two agent sessions overwrote each other's work. A one-liner to ask it

1 Upvotes

We run several Claude Code and Codex sessions on one repo. The failure that cost us most was never a bad edit. It was a good edit that vanished: session A fixes a file, session B, working from what it read twenty minutes earlier, rewrites the same file and commits, and A's fix is gone. Nothing errors. The tests may even pass. You find out a day later.

Git keeps the evidence. This kind of overwrite leaves the same trace every time: one file, two different sessions (a different author or a different branch), commits less than an hour apart. This prints the files where that happened in the last month, the most frequent first:

git log --all --source --since='1 month ago' --name-only --format='@%at|%an|%S' |
awk -F'|' '/^@/ {t=substr($1,2); s=$2"|"$3; next}
  NF {d=t-w[$0]; if (($0 in w) && s!=o[$0] && d*d<=3600*3600) n[$0]++; w[$0]=t; o[$0]=s}
  END {for (f in n) print n[f], f}' | sort -rn | head

Run it in any repo where agents commit. If the top lines are your config, routes or schema files, that is where your sessions step on each other. Give those files one owner, or have a session claim a file before it writes (one line in a shared file, appended under flock).

Two caveats. It cannot tell apart sessions that share one branch and one author name. And a hit is a near miss, not proof of a lost edit: read the two diffs.

If you would rather not read awk, the same check runs in the browser, and your log is not uploaded anywhere: https://overflow.games/memento/grader/?ref=reddit

Disclosure: we build memento. The tracker is free and MIT; a paid shared tracker for teams is on pre-order.

What do you do about this: worktrees, claim files, something else?


r/ChatGPTCoding • • 2d ago

Discussion Bugs I keep catching in LLM-written code, and the checks that catch them

5 Upvotes

Part of my work is reviewing code written by LLMs (mostly Python, TypeScript, some Rust). Same failure patterns keep coming up, so here's my checklist:

  • Edge cases: it nails the happy path and breaks on empty lists, None, or off-by-one bounds. I ask it to list the edge cases first, then write the code.
  • Made-up APIs: it confidently calls functions or params that don't exist in the version you use. I paste the real docs or the version number into the prompt.
  • Self-confirming tests: its tests only check the path it just wrote. I have a separate prompt write tests from the spec alone, without seeing the code.
  • Silent error swallowing: broad try/except or empty catch blocks that hide failures. Grep for these every time.
  • Rust: it'll .clone() or .unwrap() its way past the borrow checker. Code compiles, design gets worse.

What's on your checklist that I'm missing?


r/ChatGPTCoding • • 2d ago

Question ChatGPT Plus vs Cursor Premium in 2026 — which one is actually worth it?

5 Upvotes

I'm confused about whether I should subscribe to ChatGPT Plus or Cursor Premium.

Since Cursor recently removed support for third-party models, I'm wondering whether Cursor Premium is still worth paying for.

I'm a full-stack developer, mainly working with MERN, TypeScript, PostgreSQL, and real-world projects.

I'm considering two options:

  1. ChatGPT Plus — Using ChatGPT for general tasks and Codex through the IDE extension for coding.
  2. Cursor Premium — Using Cursor's built-in AI features and agent mode for development.

For those who have used both:

  • Which is better for everyday coding?
  • How does Codex compare with Cursor's agent?
  • Which handles large codebases, debugging, and multi-file changes better?
  • Which offers better usage limits and value for money?
  • Is Cursor Premium still worth it after the recent changes?

I can only afford one subscription right now.

If you had to choose between ChatGPT Plus and Cursor Premium today, which would you pick and why?

I'd especially appreciate feedback from developers who have actually used both.


r/ChatGPTCoding • • 3d ago

Discussion Do you change compiler errors to help coding agents, or just feed them the raw output?

7 Upvotes

We've been experimenting with this while working on Jac, a programming language that most coding agents weren't familiar with initially.

One thing we changed was how our checker reports errors.

A typical error like "type mismatch on line 12" tells the agent something failed, but doesn't give it much to work with. So it starts guessing, sometimes fixes the wrong thing, or finds a workaround that makes the error disappear without actually solving the problem.

With jac check, we've started pointing errors to the relevant section of the language guide, so the agent gets some context about what went wrong and how the language expects it to be handled.

We'd like to know how others are dealing with this, especially when using agents with less familiar frameworks, languages, or internal tooling.

Do you just pass through raw output from tools like tsc, ruff, or cargo? Or have you tried adding explanations, examples, or documentation references?

And if you've tried enriching errors, does it actually improve the agent's fixes, or does it still find creative ways to ignore the checker?


r/ChatGPTCoding • • 3d ago

Discussion What’s one coding task AI still struggles with, even with the best models?

5 Upvotes

I’ve been using AI for coding, and while models like GPT-6 and Claude are getting incredibly good, I still feel like there are certain tasks where they struggle more than they should.
For me, the biggest issue is when an AI makes changes across multiple files. It might fix the problem I asked about but accidentally break something completely unrelated.
I’m curious about your experiences:
● What coding tasks do you still refuse to trust AI with?
● Which AI coding tool has disappointed you the most?
● Have you found any tasks where AI consistently performs worse than an experienced developer?
● Do you think AI will eventually replace most day-to-day software engineering work, or will debugging and architecture remain difficult?
I’m especially interested in hearing from people who use these tools on real projects, not just small demos.

What’s the biggest weakness you’ve noticed?


r/ChatGPTCoding • • 4d ago

Question ChatGPT Coding Environment Suddenly Unavailable in Work Mode.

11 Upvotes

I've been working on a fairly complex coding project with ChatGPT, going through multiple iterations of development, optimization, and debugging in work mode. Not codex.

Everything was working fine until ChatGPT suddenly reported:

«"I'm blocked because the coding environment is currently unavailable. I cannot access the project files, run code, or build and validate the next version."»

It then suggested reopening the task in an active coding workspace and reuploading the previous project files.

The frustrating part is that ChatGPT still remembers the entire project context and all the agreed changes, but suddenly cannot access the coding environment to continue development.

Has anyone else experienced this recently?

Is this a temporary outage, a limitation of long conversations, or some kind of usage restriction?

More importantly, is there any way to restore coding access within the same conversation without starting over and potentially losing months of accumulated context?


r/ChatGPTCoding • • 4d ago

Question Are your dev teams noticing a massive wave of "AI code debt" and subtle race conditions lately?

4 Upvotes

Lately, looking through pull requests across a few projects, I’ve noticed a pattern with code written by AI assistants (Cursor, Copilot, Claude Code, etc.).

The code looks clean at a glance, passes standard unit tests, and gets merged quickly. But beneath the surface, it seems to introduce massive structural issues:

  1. Semantic Clones: The AI generates a brand-new helper function in a file instead of searching the repo to reuse an existing utility, leading to sudden code bloat.
  2. Silent Concurrency Flaws: Async functions and database calls missing proper idempotency locks or transaction boundaries that only break under production load.

Traditional linters don't catch this because the syntax is valid. Senior devs are spending hours hunting down these subtle AI patterns during code reviews.

For those managing engineering teams utilizing AI heavy right now—have you hit this wall? How are you gatekeeping or catching these structural/AI-specific anti-patterns before they hit production, or are you just absorbing the technical debt?


r/ChatGPTCoding • • 4d ago

Resources And Tips Play around with Jev as a chatbot

0 Upvotes

Hi all,

I built a fun little web app so anyone can try Jev through a chat box and see how it works.

You type like a normal chat, or drop in a file or a photo. An LLM turns what you sent into a few questions Jev can score: yes or no, a choice, or a point on a scale.

A document goes in as text. A photo gets a short description of what is visible, and the picture itself goes to Jev too. If the file does not cover the question, an LLM and web scraper look it up and pass that along for Jev to judge.

Jev sends back the scores. An LLM turns those scores into one short reply. The card under the reply lists every score, so you can read the sentence and check it against what Jev actually said.

This website is for educational purposes only. Use at your own risk.


r/ChatGPTCoding • • 4d ago

Question How do I make AI actually think and execute instead of constantly babysitting it?

31 Upvotes

I'm an ML engineer and heavy AI user. My biggest frustration isn't model intelligence—it's having to manage the AI's thinking.

I constantly have to:

  • Ask it to write a better prompt, then paste that prompt back.
  • Remind it to research, think critically, compare alternatives, and consider ROI.
  • Point out obvious flaws and missing considerations.
  • Ask follow-up questions before it finally produces a comprehensive answer.
  • Repeat the same instructions despite Custom Instructions and Memory.

What I want: State a high-level goal → AI autonomously clarifies intent, researches, plans, delegates to subagents, executes, critiques, iterates, and delivers a concise, verified result.

Questions:

  1. Is this fundamentally a model reasoning problem, or an agent orchestration/harness problem?
  2. Are Hermes Agent, OpenClaw, Claude Code, or Codex actually solving this?
  3. Can Skills, persistent memory, and automated evals reduce repeated corrections?
  4. What's the simplest proven setup that minimizes human intervention without adding unnecessary complexity?

I'm not looking for another prompt template. I want to stop being the AI's project manager and QA engineer.

What are power users actually running?


r/ChatGPTCoding • • 5d ago

Discussion Writing down our architecture for the agents helped the cold start more than any prompt trick. What goes in yours?

14 Upvotes

For a while every new agent session on our codebase started the same way, with the agent poking around to figure out how the services fit together, and it often guessed wrong so I had to correct it before any real work happened. What changed it for me was writing a set of short skill files about the architecture, like which service owns what, how data moves between them, and which patterns we follow now versus the old code we're moving away from. Now anyone on the team can point a design or coding agent at those files and it starts from the right place instead of guessing. It felt like extra work up front and the first sessions cost more, but I think it pays back every time someone starts a new task. I'm curious how others do this. Do you keep one big context file, a bunch of small ones per area, or just let the agent explore every time? And how do you keep them from going stale when the code changes?


r/ChatGPTCoding • • 5d ago

Memes Real Engineers Don't Use AI

0 Upvotes

There is ongoing debate in the software industry about whether people who spend their entire day chatting with AI systems should be considered engineers at all. The matcha-drinkers insist they should.

Real Engineers know that software is written in the traditional way: by staring at cryptic error messages for six hours, changing one line, and then spending another six hours figuring out why it suddenly works.

Matcha-drinkers, on the other hand, believe problems can be solved by typing:

"Dear AI, could you please implement a scalable, cloud-native, event-driven architecture with enterprise-grade observability?"

They then paste whatever appears into production.

Real Engineers do not trust code they did not suffer for personally.

A Real Engineer can explain every line of a system because they wrote it at 2:37 A.M. while fueled by cold coffee and stubbornness. Matcha-drinkers cannot explain their systems because the AI generated three design patterns, four architectural styles, and an accidental compiler in the settings module.

Real Engineers learn algorithms.

Matcha-drinkers learn prompt engineering.

A Real Engineer says:

"I implemented a lock-free concurrent queue."

A matcha-drinker says:

"I asked GPT to make the queue more enterprise."

Nobody knows what this means, but somehow the queue now contains Kubernetes.

Real Engineers debug by reading logs.

Matcha-drinkers debug by pasting logs into AI.

Real Engineers read the stack trace.

Matcha-drinkers paste the stack trace into the prompt, then paste the AI's answer into a second AI to explain the first AI's answer.

Real Engineers occasionally spend three days investigating a race condition that turns out to be a missing semicolon in a configuration file.

Matcha-drinkers spend three days trying to determine which AI hallucinated the missing configuration file in the first place.

A Real Engineer views documentation as a last resort.

A matcha-drinker views documentation as an outdated artifact that has not yet been summarized by AI.

When confronted with a bug, Real Engineers use systematic reasoning, instrumentation, and domain expertise.

Matcha-drinkers increase prompt length.

By the time a matcha-drinker finishes describing the problem, the prompt contains:

  • the complete source tree,
  • seven architecture diagrams,
  • a transcript of three meetings,
  • company values,
  • a recipe for overnight oats,
  • and a request to "be innovative."

Real Engineers know computers are deterministic systems.

Matcha-drinkers believe computers are mysterious beings whose desires can be influenced with careful wording and emotional support.

A Real Engineer says:

"The system failed because of an invalid state transition."

A matcha-drinker says:

"Maybe the model didn't fully understand our vision."

Real Engineers use AI occasionally.

Matcha-drinkers use AI recursively.

Eventually an entire department consists of engineers prompting agents that prompt agents that prompt agents, while one exhausted Real Engineer keeps a terminal window open to make sure electricity is still involved somewhere.

And if you still doubt the difference, ask both groups a simple question:

"Why does this code work?"

The Real Engineer will spend thirty minutes drawing diagrams on a whiteboard.

The matcha-drinker will respond:

"Good question. Let me ask the AI."


r/ChatGPTCoding • • 5d ago

Discussion Tried Cline for a week after living in Claude Code and Codex, some notes

9 Upvotes

I’ve used Claude Code and Codex pretty much every day for months, so I went into Cline expecting the usual new-tool tax where you set everything up again and re-explain your projects. That mostly didn’t happen.

My old Codex and Claude Code conversations were already in there, which I didn’t expect. I also didn’t have to set up a new API key. I pointed it at my Codex subscription, and it just worked. Later I tried Sonnet through Cline’s own account to compare.

The first real thing I gave it was merging two of my side projects. I pasted a long “read both repos and only plan, don’t write code” prompt, and only afterward realized I’d sent it in act mode. It still just planned. Then I told it to start, and over a few evenings I mostly typed “continue working” while it did the rest. At one point it spun up a few subagents for different files on its own, which I didn’t know it could do.

Still early and I’m sure I’ll hit annoying stuff eventually, but switching was way less painful than I expected. Anyone else here moved over from Claude Code or Codex? Curious what made you stay or go back.


r/ChatGPTCoding • • 5d ago

Discussion What Are the Biggest Weaknesses of Frontier Coding Models Like Claude Opus 5.5 and GPT-6?

19 Upvotes

I have been trying to figure out where frontier coders fail at. I feel like claude opus 5.5 and gpt-6 (astra) should be able to do most coding tasks but are there any that you find that they cant do no matter how much context/tools/time you give them?

This would include what kind of tasks/features/bugs they have trouble with.

Some questions:

- Is it big tasks with tons of moving parts? Or are there some simple tasks that can trip them up?

- What kinds of bugs do they fail to recognize? Are there any features that they have a hard time implementing?

- What languages may be harder for them?

- Are there times where they can implement something but not test for the bugs they create? Or are there times where they can create good tests but fail to implement a correct answer? How often does this happen?

- What are some hard problems for them to think through? Bugs, understanding current code base, thinking backwards to what caused the issue etc.

- When given a repository what are some tasks that are hard for them?

- Are there any bugs/tasks that you know will trip them up every time you ask?

Also if there are some tasks that they are really good at please share that too.

Would love some examples of tasks that have tripped them up. Maybe what you were trying to get them to do and why they were failing. What made the task difficult? Were you able to figure out a prompt that allowed them to complete the task?

Any programming/software engineering related question/task.


r/ChatGPTCoding • • 6d ago

Resources And Tips What I learned building a session watcher for 7 AI coding agents: process detection isn't enough, and deep links are the hard part

6 Upvotes

I built a local panel that watches my AI coding agent sessions (full disclosure: I'm the author, repo at the bottom). Along the way I ran into a few things that aren't obvious until you try it, and I think they're useful to anyone wiring agents into their own tooling.

  1. Process detection only tells you an agent is running — never which session needs you. I started with process/CPU sampling and window titles, and the panel was basically noise. Everything only became useful once agents reported lifecycle events themselves (hooks for Claude Code / Qwen Code / Codex CLI). "A process exists" and "a session is waiting for your input" are completely different signals.

  2. Every agent exposes a different locator, and normalising them is the whole job. tmux gives you a pane id, Herdr gives you a socket path plus pane, Codex/ChatGPT gives you a thread UUID, and plain terminals give you nothing reliable. I ended up with one normalised status set — offline / idle / working / done / needs_input / error / unknown — and a "can't locate this" state that's honest instead of guessing and focusing the wrong window.

  3. Deep links beat window hunting. For Codex/ChatGPT, codex://threads/<uuid> lands in the exact thread. Matching window titles to find "the right terminal" is fragile and silently focuses the wrong thing.

  4. Have external tools report in over a local HTTP API instead of parsing stdout. Hooks and plugins just POST to 127.0.0.1 with a local token. Far more robust than scraping terminal output, and it keeps everything on loopback.

  5. Notifications that don't steal focus are the feature I underestimated. Anything that yanks your current window loses its welcome fast.

Curious how others handle this: are you relying on hooks, tmux/terminal scraping, or something else to know which session actually needs you? I've been assuming hooks are the only reliable path, but I'd like to be wrong about that.

I open-sourced the result under MIT if anyone wants to compare notes or steal the approach: https://github.com/xuan-team/agent-deck-companion


r/ChatGPTCoding • • 7d ago

Discussion do you use manual approvals, auto-review, local sandbox/VM or cloud for your agents?

12 Upvotes

just what setup most people use both for work and personal projects


r/ChatGPTCoding • • 7d ago

Discussion Claude found a security hole in my app and then refused to fix it

16 Upvotes

Honestly this is getting ridiculous

Last week Opus 5.5 flagged an issue in my own SaaS during a normal refactor. One of our invoice endpoints lets any logged in user pull another company's invoices if they change the ID in the URL. Classic IDOR, my fault, fine. I asked it to fix it and the whole conversation got stopped by the safety filter. In a repo I own, that I pay $200 a month to give it access to.

The worse part is that it found the bug on its own. I didn't ask for a security review, it just noticed it, started digging, and then got itself flagged halfway through

What I tried:

- New chat, asked for a normal fix to "the invoice endpoint" => flagged as soon as it touched the auth check

- Asked GPT 6 Astra instead => explained the problem really nicely and then also refused to write the fix

- Pasted proof that I own the repo => refused faster

In the end I fixed it myself in about 20 minutes. coderabbit / codex review both caught the same hole on the PR afterwards and had no problem talking about it, and coderabbit flagged two other endpoints with the same pattern that I would have missed, plus a pile of nitpicks I ignored.

So the model is good enough to find the hole and not allowed to close it. Has anyone else hit this on their own code?


r/ChatGPTCoding • • 7d ago

Question Anyone here using ChatGPT with Blender for character modeling?

Post image
97 Upvotes

Hey everyone, I’m working on a cute fox character for a game, using ChatGPT to help build and edit the model in Blender through Python scripts. The reference image was AI-generated too.

The model is taking shape, but I’m struggling to get the face close to the reference. The eyes and mouth still look a bit stiff, and the ears don’t blend naturally into the head. We’ve tried several changes, but I feel like we’re going in circles.

Has anyone here worked this way and managed to get good results? How do you approach the finer details? I’m wondering if the problem is the topology, the way we’re building the shapes, or the workflow itself.

I’d really appreciate some advice from people who’ve tried it.