AI Coding Live News

X Discussion: Addy Osmani of Claude Code Warns of "Cognitive Surrender" and Urges Developers to Keep Critical Thinking When Agents Do the Work

Addy Osmani (@addyosmani), whose X bio lists Claude Code at Anthropic, posted a long article on X on November 3 titled "Critical thinking when agents do the work." He describes a spectrum of working with AI: cognitive offloading (delegating a task but owning the result), deferral (the tool output becomes your new input), and "cognitive surrender" (the AI output quietly becomes your own and you feel no need to check it), a term he credits to Steven Shaw and Gideon Nave at Wharton. He offers self-check questions and verification habits. Within about three hours the post drew roughly 1,400 likes, 2,400 bookmarks and more than 72,000 views and reached X trending. These are the author's views, not an Anthropic announcement.

Key Takeaways

  • The spectrum: cognitive offloading (delegate but keep ownership, which the author says he does all day), deferral (the output stops being a hypothesis), and cognitive surrender (no more checking; it becomes your conclusion). Read the X article.
  • His argument: as models improve there are fewer obvious errors, so well-written, mostly correct output no longer demands a second look, and even with many agents running you still have only one pair of eyes on the results.
  • Self-check questions: write down your hypothesis before asking; know whether the AI is helping you think or thinking for you; ask what would make it wrong and test it; have several models argue the other side; ask whether you would bet on it in front of the person who maintains it.
  • Verification habits: define "verified" up front (a passing test, a screenshot, a log); a green check proves one property, so ask what it did not prove; have Claude Code critique its work with a fresh-context subagent, and finish by asking "Did I miss anything?"
  • Delegate fully where being wrong is cheap, but keep the reasoning for decisions whose consequences land on others, such as what to build and whether it is safe to ship.
Read full story
Linked Models & Agents:

X Discussion: levelsio Used Claude Code to Decompile the Battlefield 1942 Demo and Put It in the Browser With Multiplayer, Citing About 1M Output Tokens

Indie developer Pieter Levels (@levelsio) said on X on November 2 that he used Claude Code to decompile the engine of the free Battlefield 1942 demo, port it to C, compile it to WebAssembly and host it at bf1942.pieter.com, where it runs in the browser with online co-op on the Tobruk map. He said the job took about 1 million output tokens, roughly $100 at API prices, while he pays for a $100-a-month Claude subscription. His two main posts drew about 2,200 likes and 340,000 views and reached X trending. These are the author's own claims and community discussion, not independently verified.

X Discussion: levelsio Used Claude Code to Decompile the Battlefield 1942 Demo and Put It in the Browser With Multiplayer, Citing About 1M Output Tokens

Key Takeaways

  • Author's account: Claude Code decompiled the Battlefield 1942 demo engine, which was ported to C and compiled to WebAssembly to run in the browser.
  • The live build at bf1942.pieter.com opens directly, is labeled non-commercial and unofficial, and offers online co-op on Tobruk with no install.
  • Cost: about 1 million output tokens by the author's count, roughly $100 at API prices; he actually pays for a $100-a-month Claude subscription.
  • He said it was much harder than his earlier Quake and DOOM ports, whose engine source code id Software released long ago.
  • Reach: the first post had about 1,100 likes and 230,000 views, the launch post about 1,100 likes and 107,000 views; testers are already reporting bugs.
Read full story
Linked Models & Agents:

Anthropic Launches Message Threads in Public Beta on the Messages API: Server-Side Conversations Cut Claude Code TTFT About 35% on 500K-1M Token Requests

On November 2 (US time) Anthropic put message threads into public beta on the Messages API (beta header message-threads-2026-08-12). The API keeps the conversation on the server: the first request sends the full conversation and creates a thread, and each later request sends only new messages plus the previous response id. Anthropic says threads are on by default for most Claude Code users, cutting median time to first token by about 35% on 500K-1M token requests, while the median long-conversation request shrank from about 800 KB to 1.8 KB. Threads expire after 5 idle minutes; pricing and rate limits are unchanged.

Anthropic Launches Message Threads in Public Beta on the Messages API: Server-Side Conversations Cut Claude Code TTFT About 35% on 500K-1M Token Requests

Key Takeaways

  • Per Anthropic, median time to first token on 500K-1M token Claude Code requests is about 35% lower.
  • The median long-conversation request fell from about 800 KB to about 1.8 KB, since each turn uploads only new messages plus previous_message_id.
  • A thread expires 5 minutes after its last request and is deleted within 1 hour; an expired thread returns 404 thread_not_found and must be replayed in full.
  • Pricing and rate limits are unchanged; Message Batches, token counting and on-demand compaction are unsupported, and threads are not ZDR or HIPAA eligible.
  • Available on the Claude API, Claude Platform on AWS, Google Cloud (Anthropic managed) and Microsoft Foundry, with a thread helper in the SDKs.
Read full story
Linked Models & Agents:

X Discussion: Former Claude Code Member Thariq Says the $200 Plans Are Enough and "This Is the Most Expensive Intelligence Will Ever Be"

Thariq (@trq212), whose X bio reads "formerly Claude Code @anthropicai", posted on November 2: "one week in my takeaway is that you don't need unlimited tokens to do great work, the $200 plans are amazing and this is the most expensive intelligence will ever be." Within about seven hours the post drew more than 5,500 likes, 240,000 views and 350+ replies. Supporters say flat-rate plans are enough for most developers; critics point out the tension between "no unlimited tokens" and recommending the top tier, and some worry prices will rise once subsidies end. This is a personal view, not an Anthropic statement.

Key Takeaways

  • Thariq's exact claim: you don't need unlimited tokens to do great work, the $200 plans are "amazing", and "this is the most expensive intelligence will ever be."
  • In replies he added that he has been using the plans on weekends for a while and has "never hit a real limit."
  • Claude's official pricing page lists Max at $100/month (5x Pro usage) and Ultra at $200/month (10x Pro usage, no 5-hour limit, $200/month in API credits).
  • Pushback centers on two points: the tension between "no unlimited tokens" and recommending the most expensive tier, and whether current prices depend on subsidies that may end.
  • This is a personal view from a former Anthropic team member, not an official Anthropic position, and it comes with no usage data.
Read full story
ADSponsored

Karpathy builds HackerTube in about 2 hours with Claude Code and Opus 5.5: a YouTube clone of 6,454 videos recommended on Hacker News

On Oct 31 Andrej Karpathy published HackerTube (hackertube.org) on his personal blog: a YouTube-style site that only lists the 6,454 YouTube videos recommended in Hacker News comments from 2007 to 2026, grouped into 150 topics. He says Opus 5.5 in Claude Code did the work: it downloaded every HN comment, ran Sonnet over them in a Workflow to narrow things down to about 40K comments recommending a video, wrapped the result in a YouTube UI, then deployed and hardened it on a VPS, all in about 2 hours. His only manual steps were creating a YouTube API key, booting the VPS and buying the domain. His HN submission reached the front page with about 1,005 points and 308 comments.

Key Takeaways

  • Source: Karpathy's personal blog post HackerTube (Oct 31), with the site live at hackertube.org
  • Scale: from every HN comment it narrowed things down to about 40K comments recommending a YouTube video, giving 6,454 videos across 150 topics from 2007 to 2026 (author-reported)
  • Method: Opus 5.5 ran the download and overall pipeline, used Claude Code's Workflow feature to have Sonnet filter comments and drop spam in bulk, then built a YouTube-style front end and deployed and hardened it on a VPS
  • Product details: it uses the frame at the 50% mark instead of the uploaded thumbnail, offers account-free For You picks with state kept only in the local browser, supports keyboard shortcuts, and exports the site's data so you can hand it to your own agent to build a variant
  • Workflow: Karpathy says Opus 5.5 on Medium effort is his default and he no longer reads or writes code or runs terminal commands himself; the HN post has about 1,005 points and 308 comments (public HN data as of Nov 1, 14:10 SGT)
Read full story
Linked Models & Agents:

Benji Taylor, head of design at X and SpaceXSI, open-sources Stageshow, an agent skill for realistic faux product UI and animated demos

On Oct 31, Benji Taylor, head of design at X and SpaceXSI, released Stageshow on X: an open-source skill (MIT license) for coding agents that helps them produce faux product UI that looks real, including stills, cursor demo animations, and bento grids, delivered as ordinary React components. It installs with one command, and he says it works with Grok Build, Claude Code, Codex, Gemini, and others. The launch post drew about 4,500 likes and 6,500 bookmarks. He notes it rarely nails a demo in one shot and most still take a few rounds of feedback.

Benji Taylor, head of design at X and SpaceXSI, open-sources Stageshow, an agent skill for realistic faux product UI and animated demos

Key Takeaways

  • Install: npx skills add benjitaylor/skills --skill stageshow; the author says it works with Grok Build, Claude Code, Codex, Gemini, and other agents (author's post)
  • Contents: a seven-step workflow in SKILL.md, reference rule docs, dozens of gold examples, a React kit, and self-check scripts such as film.mjs (GitHub)
  • License: the stageshow folder is MIT licensed; the repo was created Oct 26 and had about 61 stars at writing time
  • Reach: the launch post had about 4,521 likes, 6,561 bookmarks, and 213k views as of Nov 1, 08:00 SGT
  • Quality claims are the author's own: the same prompts did better with the skill, but no quantitative evaluation was published
Read full story

Anthropic adds two sentences to Claude Code's Opus 5.5 prompt to steer it away from recreating specific existing games; original and genre games still allowed

Around Oct 27, users noticed Claude Code receiving a new server-side rule (flag name tengu_heron_brook): build original games, games in a genre, and games from the user's own designs and assets, but do not build a recreation of a specific existing game, even if it is renamed or called original. The post that surfaced it drew about 8,700 likes and nearly 2 million views on Oct 30. The same day, Addy Osmani, who works on Claude Code at Anthropic, confirmed on X that the team added two sentences to Claude Code's prompt on Opus 5.5 because using Claude to infringe IP is against Anthropic's usage policy. He said original games, genre games, and games built from your own designs and assets should keep working, that the team will keep iterating, and that users can send him wrongly refused requests.

Key Takeaways

  • Scope: the change is just 2 sentences in Claude Code's system prompt for Opus 5.5, pushed from the server with no user-side toggle (Addy Osmani's post)
  • Rule text (per the flag tengu_heron_brook users captured): original games, genre games, and games from the user's own designs and assets are allowed; a recreation of a specific existing game is not, "even if it is renamed or called original" (original report, about 8,700 likes and nearly 2M views)
  • Basis: Anthropic's Usage Policy prohibits using its products to infringe, misappropriate, or violate a third party's intellectual property rights
  • Feedback path: Osmani says the team will keep tuning the line and asked users to send him wrongly refused requests; there is no separate Anthropic blog post yet, and benchmarks do not apply
Read full story

Microsoft Research and UC Berkeley open-source TokenEconomizer, a plugin that cuts Claude Code and Codex costs by 18.4–30.9% on SWE-Bench without changing the agent

Microsoft Research, Microsoft Security and UC Berkeley open-sourced TokenEconomizer on GitHub (Apache 2.0, v0.1.0 released October 26), a plugin for Claude Code, Codex, GitHub Copilot CLI and Pi, with experimental opencode support. It learns from earlier sessions in the same repository: micro-skills remember repo facts, tool pruning drops tool definitions that go unused, and a loop guard nudges an agent that is stuck. The paper reports 18.4–30.9% lower mean cost across five agent and model combinations on 277 SWE-Bench tasks (paper figures).

Microsoft Research and UC Berkeley open-source TokenEconomizer, a plugin that cuts Claude Code and Codex costs by 18.4–30.9% on SWE-Bench without changing the agent

Key Takeaways

  • Cost: on 277 SWE-Bench tasks across 6 repositories and 5 agent and model combinations, mean cost fell 18.4–30.9%, and all 30 repository-by-combination cells got cheaper (paper figures, including the plugin's own model calls)
  • Success rate: Pass@1 rose in 4 of 5 combinations, e.g. Copilot CLI with Sonnet 5 cost 18.4% less with Pass@1 +2.6, while Claude Code with Opus 4.8 cost 30.9% less with Pass@1 -1.0
  • Three mechanisms: micro-skills (repo facts stated only after three sessions confirm them), tool pruning (by default a tool unused over 10 prompts across 2 sessions is left out), and a failure-loop guard (one redirect when a judge is at least 0.7 confident, never stopping a turn itself)
  • Generalization: 16–21% lower cost on Web-Bench and 6–20% lower on two security-auditing benchmarks where every task is a new repository
  • Deployment: Apache 2.0, Python 3.10+, no API key of its own, and learned experience stays local in ~/.tokeneconomizer
Read full story

Kaggle and IBM Research launch the ScarfBench Java migration leaderboard: Gemini 4 Argon with Antigravity leads at 75.2%, and about 72% of failures happen at runtime

Kaggle announced ScarfBench with IBM Research, a 204-task benchmark that tests whether coding agents can migrate enterprise Java apps between Jakarta EE, Quarkus and Spring without changing behavior. IBM's October 27 technical note shows Gemini 4 Argon with Antigravity first on the smoke score at 75.2%, Claude Opus 5.5 with Claude Code highest on all-tests-pass at 72.1%, and GPT-6.1 Sol with Codex cheapest at $1.25 per solved task.

Kaggle and IBM Research launch the ScarfBench Java migration leaderboard: Gemini 4 Argon with Antigravity leads at 75.2%, and about 72% of failures happen at runtime

Key Takeaways

  • 204 migration tasks and 10 model-plus-harness configurations; top smoke scores are Gemini 4 Argon + Antigravity 75.2%, Claude Opus 5.5 + Claude Code 70.5% and Claude Opus 5 + Claude Code 69.8% (IBM figures)
  • Claude Opus 5.5 + Claude Code has the highest all-tests-pass rate at 72.1%, just ahead of Gemini 4 Argon at 71.1%
  • Compiling is mostly solved: 8 of 10 configurations compiled at least 97% of solvable tasks, yet smoke scores spanned more than 50 points
  • 535 of 745 classified failing runs (about 72%) were runtime behavioral failures, including 210 lost-route/404 failures
  • Cost per solved task: $1.25 for GPT-6.1 Sol + Codex, $1.59 for Gemini 3.8 Flash + mini-swe and $10.10 for Claude Opus 5.5 + Claude Code; public submissions are not open yet
Read full story

OpenCode 2.2.3 adds a built-in Claude Agent provider that runs Claude models through your own Claude Code login, subscriptions included

OpenCode, the open-source coding agent, shipped v2.2.3 at 09:55 UTC on Oct 30 with a built-in "Claude Agent" provider. After installing Claude Code and running claude auth login, users pick Claude Agent in /connect and can call Claude models through their own Claude Code login, whether that is a subscription, an API key or a cloud account. It runs the user's local claude program through Anthropic's public Claude Agent SDK, but turns off Claude Code's built-in tools and uses OpenCode's own tools and permission system instead. Hours earlier, OpenCode team member dax (@thdxr) teased on X "what if you could use your claude subscription in opencode", drawing about 2,300 likes.

Key Takeaways

  • v2.2.3 shipped at 09:55 UTC on Oct 30; its first highlight is "Use Claude Code in OpenCode", from PR #58782 (release notes)
  • Setup is three steps: install Claude Code, run claude auth login, and pick Claude Agent in /connect; OPENCODE_CLAUDE_PATH overrides the claude binary
  • The design spec says it uses only the public SDK, never reads Claude Code's saved login and never intercepts or changes its requests; subscription, API key and cloud logins all work (spec)
  • Claude Code's built-in tools, CLAUDE.md, hooks, MCP servers, skills, auto compaction and auto memory are all off; OpenCode's tools, permissions and compaction apply, with one claude process per session that stops after 5 idle minutes
  • dax's (@thdxr) teaser post drew about 2,300 likes and 280 replies (post); no performance comparison has been published
Read full story
ADSponsored

Cursor marketplace served a tampered Claude Code 2.1.313 extension with an SSH backdoor, affecting at most 5,000 users

Cursor posted a security notice on X at 07:46 UTC on Oct 30: version 2.1.313 of Anthropic.claude-code in its VS Code extension marketplace was a maliciously modified build, not developed by Anthropic, available from about 2:27am to 1:35pm PT on Oct 29 and affecting at most 5,000 users. The payload collects host details, adds an attacker SSH key, tries to open a reverse SSH tunnel and installs persistence. Cursor pulled the version, shut down and rebuilt the marketplace, rotated keys and had the attacker server taken offline; it asks users to update Claude Code for VS Code to 2.1.314 and follow the check and cleanup steps in its blog post.

Key Takeaways

  • Scope: Anthropic.claude-code 2.1.313 (darwin-arm64 and win32-x64 packages) in the Cursor extension marketplace, downloadable from about 2:27am to 1:35pm PT on Oct 29 (about 11 hours), at most 5,000 users
  • Payload: collects hostname, username, OS, environment variable names, Git email and public IP; adds an attacker SSH key labeled svc-telemetry; tries a reverse SSH tunnel, retrying about every 60 seconds; reports to /beacon on port 8099
  • Cursor says enabling the local SSH service needs admin rights, so that step fails on most macOS and Windows hosts, but the key, persistence and beacon still run; the attacker server is now offline
  • Cursor pulled the version, shut down and rebuilt the marketplace, rotated keys and confirmed no other extensions were tampered with; it has no evidence other versions or Anthropic's official distribution were affected
  • Self-check: on macOS run grep svc-telemetry ~/.ssh/authorized_keys; if found, isolate the host, run Cursor's remediation script, rotate credentials from a trusted machine, and update to 2.1.314
Read full story

Factory launches Droid 1.0: programmatic tool calling by default, hundreds of tool calls per model request, leads native harnesses on its own Terminal-Bench 4 runs

AI coding agent company Factory announced Droid 1.0 on X and its blog at 22:31 UTC on Oct 29, calling it the largest update yet to its agent harness. The key change makes programmatic tool calling (PTC) the default: the model writes a JavaScript program that runs up to hundreds of tool calls in a sandbox in one model request. In Factorys own Terminal-Bench 4 runs, Droid scored 57.6% with GPT-6.1 Sol ($0.79 per passed task) and 65.2% with Claude Opus 5.5 ($4.73), ahead of Codex, Claude Code, Cursor, OpenCode and Devin on the same models.

Factory launches Droid 1.0: programmatic tool calling by default, hundreds of tool calls per model request, leads native harnesses on its own Terminal-Bench 4 runs

Key Takeaways

  • Programmatic tool calling is now the default: the model writes JavaScript that runs in a sandbox with no file, network or system access of its own, making up to hundreds of tool calls per request, with independent calls run concurrently
  • Factory example: moving and verifying 151 Linear issues took 312 tool calls; direct calls needed about 36 requests and 3.1M input tokens, a Script needed 2 requests and 61K tokens
  • Terminal-Bench 4 (Factory runs, Oct 23-28, three trials per task): with GPT-6.1 Sol, Droid 57.6% vs Codex 54.0%, OpenCode 51.0%, Devin 45.0%; with Opus 5.5, Droid 65.2% vs Cursor and OpenCode 62.1%, Devin 59.6%, Claude Code 57.6%
  • The first request shrank from 20,887 to 13,055 tokens (-37%) and up-front tool definitions went from 11 to 2; newly loaded MCP tools are appended to keep the prompt cache intact, and a typical production request reads 98% of input from cache
  • Available now as a macOS and Windows desktop app, a terminal UI and the Droid SDK (@factory/droid-sdk); the benchmarks are vendor-run with no third-party reproduction yet
Read full story
A
Anthropic@AICoder·
👀92
🔥80

Claude Code 2.1.314 adds a block on writes outside working directories, IdP group routing for the apps gateway, and idle compaction in VS Code and Desktop

Anthropic published Claude Code v2.1.314 on GitHub at 01:06 UTC on Oct 30. The official CHANGELOG lists 119 entries, more than half of them fixes. The new features lean enterprise: permissions.blockWritesOutsideWorkingDirectories makes Write, Edit and NotebookEdit refuse paths outside the working directories in every permission mode; Claude apps gateway upstreams can be limited to IdP groups, and Bedrock upstreams can log which guardrail fired; idle compaction now also runs in VS Code and the Code tab of Claude Desktop. It also fixes sessions failing repeatedly when an admin caps effort, and claude -p exiting 0 with no output when startup failed.

Key Takeaways

  • Size: the official v2.1.314 CHANGELOG has 119 entries, more than half of them fixes; released at 01:06 UTC on Oct 30
  • Safety: the new permissions.blockWritesOutsideWorkingDirectories setting stops Write, Edit and NotebookEdit from writing outside the working directories in every permission mode
  • Enterprise gateway: upstreams take an optional groups list so only developers in those IdP groups are routed there, failover included; Bedrock upstreams gain guardrail_trace
  • Experience: idle compaction now runs in VS Code and the Claude Desktop Code tab, summarizing idle conversations above 200K tokens
  • Fixes: when an admin caps effort, Claude Code lowers it and retries; a failed claude -p startup now prints the error and exits 1
Read full story
Linked Models & Agents:

Symantec finds a grey-market relay that installs the real Codex and Claude Code CLIs, then turns off sandboxing and routes every request through its own servers

On Oct 29 Symantec's Threat Hunter Team disclosed an unauthorized AI relay seen at about a dozen organizations since early 2026, mostly in mainland China. Users install the genuine Codex or Claude Code CLI via npm, then run a one-line script from the reseller that rewrites ~/.codex/config.toml or ~/.claude/settings.json, points base_url at relay domains, swaps in relay-issued keys, sets the sandbox to danger-full-access and disables telemetry. Symantec says this is not a CLI vulnerability and it has seen no abuse so far.

Symantec finds a grey-market relay that installs the real Codex and Claude Code CLIs, then turns off sandboxing and routes every request through its own servers

Key Takeaways

  • About a dozen affected organizations, mostly in mainland China, plus Chinese or home-market units of South Korean, Taiwanese and Malaysian firms in semiconductors, electronics, pharma, shipping and petrochemicals
  • A one-line iwr | iex or curl | bash command fetches a fileless script from lookalike domains such as vibe.aiok[.]me, installs the genuine CLI, then rewrites its config, so it looks like a normal setup step
  • The Codex sandbox is set to danger-full-access with network access on, and DISABLE_TELEMETRY=1 and DISABLE_ERROR_REPORTING=1 are set
  • Relay-issued Claude Code keys use the sk-ant-oat01- prefix of subscription OAuth tokens, which Symantec says is consistent with, but not proof of, pooled subscription resale
  • Symantec says this is not a vulnerability in Codex or Claude Code and it has no evidence the operator has abused its access; the risks are potential
Read full story

Claude Code lead Boris Cherny on faster usage drain: every shared session reviewed, no regression found, fixes for a few smaller issues rolling out

Since Oct 21 many developers on X have complained that Claude Code was draining usage limits much faster. On Oct 28 (UTC) Boris Cherny, who leads Claude Code at Anthropic, replied on X that the team reviewed every session ID users shared, found no single root cause and no regression in Claude Code, and is rolling out fixes for a few smaller issues that made some sessions burn tokens faster. Most fast-drain cases traced back to one or two heavy sessions using xhigh effort, /goal, Workflows, Agent Teams or long SDK jobs.

Key Takeaways

  • The complaint post that started it said usage was draining 5x faster and drew about 1,660 likes and 240+ replies (a user claim, not official data)
  • Boris Cherny: the team checked every shared session ID, found no single root cause or Claude Code regression, and is rolling out fixes for a few smaller issues
  • Heavy features were the main driver: xhigh effort, /goal, Workflows, Agent Teams and long SDK jobs
  • Subagents inherit the session effort level by default, which adds up fast; /usage shows where tokens went
  • The official docs say Agent Teams use about 7x more tokens than standard sessions when teammates run in plan mode
Read full story
Linked Models & Agents: