1030: AI Assistant Hacks Gym

The messy breakup is official; as of November 12, OpenAI's models are getting pulled from Cursor, and we're digging into who's really to blame (and why Wes called it). Plus pnpm 12 goes full Rust, Mitchell Hashimoto drops Superlogical, ~700 AI agents attack Hugging Face, and Zod 4.5's compiled schemas get up to 9x faster. Show Notes 00:00 Welcome to Syntax! 00:33 pnpm 12 Rust Re-Write 02:45 Zod 4.5 brings Schema Compilation Zod 4.5 launch post 05:22 Brought to you by Sentry! 07:14 Cursor OpenAI Break Up Michael Truell’s post 15:35 vGPU - WebGPU library for agents TypeGPU Main differences between vgpu and TypeGPU 22:32 Omarchy Security Issues and Linux Chat Omarchy Security issue in Omarchy Close three paths from an unprivileged session to root commit CachyOS 36:38 Scott Bought an M5 Ultra Mac Studio 44:45 Superlogical is a new terminal multiplexer 48:31 Zurich JS 48:55 Katamari Object Library 52:05 ThreeUI - Three.js library 55:36 Hugging Face Hack Analyzed / Updates METR & Redwood Research investigation Brief independent investigation of agents’ behavior About the Hugging Face attack Postmortem of the HuggingFace hack 01:00:46 llms.txt used to pwn devs 01:03:56 Running Isolated Code Poll 01:05:47 OpenShot 4.0 - OSS Video Editor Blick editor 01:09:06 Lake America 01:11:24 Ox Alpha is GLM 5.3 Hit us up on Socials! Syntax: X Instagram Tiktok LinkedIn Threads Wes: X Instagram Tiktok LinkedIn Threads Scott: X Instagram Tiktok LinkedIn Threads Randy: X Instagram YouTube Threads

Meta’s StyleX compiles thousands of styles into a few reusable class names at build time—zero runtime, fully type-safe. Scott and Wes break down why it’s suddenly everywhere, and why it might be the best CSS tool for AI agents. Show Notes 00:00 Welcome to Syntax! Syntax Ep 650 San Francisco Syntax Meetup 02:18 What Is StyleX and How Does It Work? 04:27 The Difference Between StyleX and Other CSS Scoping Methods 06:03 What People Are Saying: StyleX Is Superior for AI Agents Jared Palmer Adam Hutchinson Aiden Bai Syntax Ep 658 11:30 Type Safety and Design System Constraints 12:46 No Runtime Dependency: All Computed at Build Time 13:49 Brought to you by Sentry.io 14:13 Reusable Styles: Import, Export, and Auto-Import 17:53 Composability and Overriding Styles With JavaScript Objects 18:24 It Sucks to Write by Hand 19:25 Modern CSS Properties and Waiting for Implementation 20:58 Nested CSS and Nested Selectors Are Tricky 22:24 Alternatives: Panda CSS and CSS Modules Syntax Ep 807 24:41 The Auto-Complete Experience: Why StyleX Shines for Agents Hit us up on Socials! Syntax: X Instagram Tiktok LinkedIn Threads Wes: X Instagram Tiktok LinkedIn Threads Scott: X Instagram Tiktok LinkedIn Threads Randy: X Instagram YouTube Threads

Grokbot actually earns its keep, Cursor takes a swing at GitHub with Origin, and Omarchy Quattro ships pre-wired for nine coding agents. Plus: the GitHub outage post-mortem, a compromised Rust crate, native app vibe-coding with Dactyl, and CAD skills for your AI via nurb.dev Show Notes 00:00 Welcome to Syntax! 00:26 Brought to you by Sentry.io 00:37 Grok’s New Agentic App: Grokbot 12:51 GitHub’s Major Outage and Postmortem 16:42 Cursor’s Origin: A GitHub Competitor 22:59 Omarchy: The Linux Distro for Nerds 29:21 CachyOS: Another Arch-Based Alternative 31:12 The $10 Million Omarchy Foundation 34:54 Dactyl: Native iOS and Android Development in the Browser 44:19 Nurb: AI-Powered 3D CAD Design 49:36 Security Stories: Supply Chain Attacks and Model Cheating 49:43 Rust Supply Chain Attack 51:34 Every Model Cheats: AI Benchmark Findings 53:13 Felony Bench: Ranking AI Models by Crimes Committed 54:19 Casio’s Smart Dumb Watch 58:43 Everything I Own Is Owned: Reverse Engineering USB Devices with AI 01:08:05 The Mystery 0x Alpha Model 01:13:48 Dactyl Returns Something Hit us up on Socials! Syntax: X Instagram Tiktok LinkedIn Threads Wes: X Instagram Tiktok LinkedIn Threads Scott: X Instagram Tiktok LinkedIn Threads Randy: X Instagram YouTube Threads

Scott and Wes run through eight new CSS, JS, and HTML features landing in browsers; including the relative alpha() color function, the progress() function for calculating values between units, Promise.allKeyed(), and native camera and microphone elements. They also get into an upgraded attr(), shrink-to-fit containers, and text-box-trim for finally killing that annoying extra space above your text. Show Notes 00:00 Welcome to Syntax! Wes’s Demo Site 00:22 CSS Alpha() Relative Color Function Google Groups 02:25 Brought to you by Sentry.io 02:48 CSS CSS Progress() Function: Calculate Values Between Units 05:09 Promise.allKeyed(): Object-Based Promise Resolution 06:55 Camera and Microphone HTML Elements 09:24 Advanced CSS Attr() Function: Props for CSS 11:25 CSS Sibling-Index() and Sibling-Count() Functions 13:56 CSS Shrink-to-Fit Container 15:36 CSS Text-Box-Trim and Text-Box-Edge Hit us up on Socials! Syntax: X Instagram Tiktok LinkedIn Threads Wes: X Instagram Tiktok LinkedIn Threads Scott: X Instagram Tiktok LinkedIn Threads Randy: X Instagram YouTube Threads

Scott and CJ break down Stripe's $7B acquisition of OpenRouter, the SvelteKit 3 release candidate, and their first look at TanStack Charts. Plus Zed's new Delta editor, stealing reasoning traces from proprietary LLM APIs, why dark mode toggles only need two states, and all 43 quintillion Rubik's cube states in your browser. Show Notes 00:00 Welcome to Syntax! 02:20 SvelteKit 3 Release Candidate 07:43 Video editor recs Casey Faris 09:58 TanStack Charts First Look TanStack Charts TanStack Charts implementations of every official shadcn/ui chart 14:24 Ponytail AI Tool 17:22 Zed Delta Editor Introducing Delta 23:44 Stripe acquires OpenRouter for $7B+ 29:27 Stealing Reasoning Traces from Proprietary LLM APIs 35:03 First look at Cursor’s GitHub killer 42:34 Dark Mode UX Discussion 46:40 Brought to you by Sentry! 48:34 Should AI respond in plain language? 52:57 Swamp Club Automation 01:02:37 Fight AI slop with this anti-slop plugin 01:03:39 Rubik’s Cube Permutations 01:05:02 Hackweek Hit us up on Socials! Syntax: X Instagram Tiktok LinkedIn Threads Wes: X Instagram Tiktok LinkedIn Threads Scott: X Instagram Tiktok LinkedIn Threads Randy: X Instagram YouTube Threads

Scott and Wes answer your questions about coding in the AI era, atrophying skills from too much autocomplete, whether it’s finally time to leave VS Code, chasing flow state with agents, and which single AI subscription is worth your money. Plus: AT Protocol vs Solid, making your AI config portable across tools, and bringing Shadcn-level UX to server-rendered frameworks. Show Notes 00:00 Welcome to Syntax! 00:57 AI-Generated Code: Are My Skills Atrophying? 06:03 Is It Time to Move On from VS Code? 13:19 Hitting Flow State with AI Coding See Wes’ Post on X 19:15 AT Protocol vs Solid: Decentralized Web Approaches 24:55 Which AI Should You Subscribe To? 30:23 Making Your AI Setup Portable Across Tools 33:56 When to Drop a Tool That Still Works 40:12 UX Quality for Traditional Server-Side Frameworks FluxUI GraffitiUI 44:14 Using Hermes and Self-Hosted AI Assistants 49:27 Sick Picks + Shameless Plugs Sick Picks Scott: ESP32-S3 Wes: Sharge ICEMAG3 Hit us up on Socials! Syntax: X Instagram Tiktok LinkedIn Threads Wes: X Instagram Tiktok LinkedIn Threads Scott: X Instagram Tiktok LinkedIn Threads Randy: X Instagram YouTube Threads

An AI assistant goes rogue and hacks a gym website, a $9k surprise Cloudflare bill lands in someone’s inbox, and AI subscriptions start promising unlimited usage. Plus Meta’s Muse Glimmer, Agent Plugins, Kimi K3 in Copilot, and a pile of CSS chaos. Show Notes 00:00 Welcome to Syntax! 02:30 Celld: self host distributed durable objects 07:57 $9k Cloudflare Bill 13:43 Ogygia - SSR islands for SvelteKit 18:49 Brought to you by Sentry.io 19:51 Standard Code - Unlimited Use AI Subscription 29:17 New Meta Model Muse Glimmer 36:12 AI Assistant Hacks Gym 46:49 This Week in AI 54:50 Prime Agent RLM harness 01:01:02 Agent Plugin Spec 01:04:08 Adam Wathan: A Token is a Token 01:07:39 New JS Runtime from Remix Creator 01:11:21 Lost phone found with Bluetooth meter 01:17:24 Center a div with browser sidebars 01:19:49 Flexwind froggy 01:21:55 Thanks for watching! Hit us up on Socials! Syntax: X Instagram Tiktok LinkedIn Threads Wes: X Instagram Tiktok LinkedIn Threads Scott: X Instagram Tiktok LinkedIn Threads Randy: X Instagram YouTube Threads

Nathan Sobo joins Scott and Wes to explain why Zed was built in Rust, how GPUI works, and what happens to editors once agents write most of the code. They also talk about DeltaDB, Zed’s new Git-compatible version control system, and Delta, the collaborative agentic editor it powers. Show Notes 00:00 Start 00:35 Welcom to Syntax 01:13 The Journey to Zed: Building the Ultimate Tool 03:26 Why Rust was chosen for Zed? 06:29 Brought to you by Sentry! 07:07 Building a UI from scratch in Rust GPUI 15:55 AI’s role in coding and development 18:42 The role of text editors in the age of AI 21:52 Delta DB: The vision for collaborative development DeltaDB 29:06 The Evolution of Collaborative Coding 44:45 The Future of User Interfaces 52:42 Sick Picks + Shameless Plugs Sick Picks Scott: Wes: Nathan Sobo: Keychron Q11 Grant Green - Idle Moments Shameless Plugs Scott: Wes: Nathan Sobo: DeltaDB Hit us up on Socials! Syntax: X Instagram Tiktok LinkedIn Threads Wes: X Instagram Tiktok LinkedIn Threads Scott: X Instagram Tiktok LinkedIn Threads Randy: X Instagram YouTube Threads

Cloudflare is rolling out crypto wallets with claimable handles as identity, and a real React compiler finally landed for regular hooks-based code. Plus: OpenAI's pricing war, Vue Vapor benchmarks, GitHub's new npm malware scanning, and an active supply chain attack hitting 868 packages. Show Notes 00:00 Welcome to Syntax! 01:02 Shai Hulud is back! New Shai-Hulud announcement Attacked keyv packages 05:27 GitHub scans your npm packages for malware 06:42 Your agent has a wallet now Make your own Cloudflare wallet announcement blog post X402 payments 12:10 Yet another React compiler? Ripple.ts Inferno.js Dominic Gannaway’s launch post Octane Native Script Reactivity + Rendering Benchmark 27:19 Scott switched his browser AGAIN! Dia Knock off extension 31:56 AI Mental health survey 32:29 OpenAI models are becoming cheaper? 38:49 GitHub stacked PRs finally arrived 41:48 AI video podcasts HeyGen launch post Hank Green’s unhealthy AI usage 48:15 Brought to you by Sentry! 49:28 News from the TC39 meeting ECMAScript news Await dictionary TC39 Process 56:58 Qwen 3.8 01:02:31 Latest and greatest in CSS and UI libraries Foley.dev Morphicons Lucide Nucleo 8bit library CSS radar Impeccable Hit us up on Socials! Syntax: X Instagram Tiktok LinkedIn Threads Wes: X Instagram Tiktok LinkedIn Threads Scott: X Instagram Tiktok LinkedIn Threads Randy: X Instagram YouTube Threads

Scott and Wes tackle your questions on the rise of the design engineer, why AI still lacks “taste” (and why it’s about more than just looks), and how to actually write tests in the age of AI-assisted coding. Plus: is AI a bubble about to burst, keeping coding agents efficient in massive codebases, introducing kids to AI, a Linux life update, and more! Show Notes 00:00 Welcome to Syntax! 01:18 The Rise of the Design Engineer Role 08:39 Why AI Has No Taste: It’s Not Just How It Looks 14:28 Brought to you by Sentry.io 14:52 Testing in the AI Era: Are We Using AI to Write Tests? 20:09 Is AI a Bubble? Will It Burst? The AI Bubble is Bursting on YouTube 24:35 Negative Public Sentiment Towards AI and Data Centers 30:16 Update on Scott Using Omarchy and Linux Is The Omarchy Hype Real? 38:14 Introducing AI to Kids: A Parent’s Perspective with Dr. Courtney 49:34 Getting Hired Without AI Experience: How to Catch Up 52:53 Keeping Coding Agents Efficient: Token Usage, Speed, and Accuracy Modem.dev Article Fallow Docs 57:10 Sick Picks + Shameless Plugs Sick Picks Scott: Kitchen Sink Brush Wes: Magnet Fishing Shameless Plugs Scott: Phases Podcast, Phases Podcast on YouTube Hit us up on Socials! Syntax: X Instagram Tiktok LinkedIn Threads Wes: X Instagram Tiktok LinkedIn Threads Scott: X Instagram Tiktok LinkedIn Threads Randy: X Instagram YouTube Threads