Will Viles retweeted
I've been cooking on this post for a bit, but with the cyber security events of this week I had to ship it:
Long-live static credentials must die. We never want to rotate API keys again.
Turns out only 8% of cloud and SaaS vendors support secure alternative. This is our call to action to change this AND our commitment to do our part:
- We are requiring vendors on our marketplace to support OIDC
- We shipped @shadcn components to make it easier to ship OIDC configuration
- We are expanding OIDC support on our own platform
The last generation got the web from HTTP to HTTPS. It is on us to move past API keys.
vercel.com/blog/death-to-lonβ¦
Will Viles retweeted
Introducing tiny.london
A massive isometric pixel map of London, based on amazing NYC demo by @_coenen from 9 months ago
My agent created the dataset, finetuned qwen image LoRA adapter, did a multiday inference run and built an efficient tile viewer!
I wanted to share something I built over the last few weeks: isometric.nyc is a massive isometric pixel art map of NYC, built with nano banana and coding agents.
I didn't write a single line of code.
Will Viles retweeted
This is one of the most exhilarating times in technology, and this challenge was yet another jaw-dropping moment.
When the details of OpenAIβs agent escape and Hugging Face hack started to emerge, it became clear that agent containment would be one of the most important priorities for any AI infra company.
There are two classes of escapes: β "escape the network" and β‘ βescape the matrixβ π, as in, break the spell of virtualization. OpenAI was the former, where an agent not supposed to have internet accessβ¦ gained it by hacking another system. Genuinely astonishing and worrisome.
Through this challenge, however, we discovered something even more groundbreaking. A talented white-hat researcher, armed with a swarm of AI agents, expertise and perseverance, "pierced through" the Linux virtualization boundary that nearly every cloud sandbox provider in the world banks on today.
I'm very thankful we got the report, were able to quickly move to protect our customers, found no evidence of customer data compromise, and collaborated with many industry partners to protect the wider internet.
Our confidence and conviction in Vercel Sandbox are even greater now, after some of the smartest, most motivated researchers in the world, and their agents, gave it their best shot.
We offered $1M to escape Vercel Sandbox.
β’ 1,285 reports
β’ $242,000 in bounties paid out
β’ One Linux kernel zero day discovered
β’ No reports of customer data compromise
vercel.com/blog/findings-froβ¦
Will Viles retweeted
Itβs hard to fathom fx.sh getting even faster, but itβs nowβ¦ much faster π
As models speed up (as with Astra πππππππππ), harness overhead matters more and more.
Next release will feature even better performance for session storage and retrieval, and a big unlock for cloud durability in libfx.
fx v0.0.13
Ultrafast support. Faster launch, shell calls & exits.
β’ Ultrafast for supported OpenAI models
β’ Launch up to 23Γ faster
β’ Shell calls up to 8.6Γ faster
β’ Exits up to 44Γ faster
β’ Configurable automatic compaction
β’ Multiple bug fixes & security improvements
fx.sh/changelog#v0.0.13
fx v0.0.9
Use a frontier model to steer, then hand implementation to a fast workhorse.
β’ Give each subagent its own model and reasoning effort
β’ Subagents keep working while you steer
β’ Send feedback to subagents mid-task
β’ Switch models with Ctrl+P without losing your draft or images
β’ New conversations get short automatic titles
β’ Better GitHub-style Markdown rendering
β’ New libfx examples for Node.js, browsers, Next.js & Nuxt
No new commands or concepts. Just chat with fx.
fx.sh/changelog#v0.0.9
Will Viles retweeted
I built a knowledge graph over our whole content estate. Itβs an SQLite DB that refreshes nightly, and takes in all our docs sites (OSS inc) KB, blog, changelog etc
We serve it through multiple entry points to give agents full and surrounding context around each product/features docs page, including semantically similar, and outbound and inbound links.
This gives agents the full spectrum as opposed to the single doc to understand where this βthingβ fits in within the Vercel ecosystem. Instead of relying on in page links only, the agent can source surrounding context too, without guessing.
You can find the root graph at vercel.com/docs/graph.json , the per page graph at e.g vercel.com/docs/functions.gr⦠, a compact version in the docs pages markdown mirror vercel.com/docs/functions.md , and in the HTML in a collapse at the bottom of each page.
Iβm still tracking requests, but early data looks promising. Will share more once we have had a month in production!
fx v0.0.8
Embedding fx just got much faster.
β’ NAPI initialization is over 40Γ faster
β’ Smaller, more accurate shell tool with 75% fewer actions
β’ TUI up to 19.6Γ faster, with first paint 74.6Γ faster
β’ Common CLI commands 18β25% faster
β’ 2.8% smaller binary (6.01mib vs 6.19mib)
β’ Active turns can now be steered with Enter
We've also documented MCP integrations with @calcom , @clerk, @knocklabs, @plainsupport, @prisma, @sentry, @Stagehanddev, @upstash
fx.sh/changelog#v0.0.8
Coding agents want ππππ. Today they get πππ:
β’ Hardened QuickJS sandbox
β’ Expose only approved host functions
β’ Pause for human approval, then resume
β’ Runs anywhere Node.js runs
vercel.com/blog/introducing-β¦
Will Viles retweeted
One of my favorite train maps. Deutsche Bahn as metro-style map. Rare. Not the map used at actual stations or the ticketing website.
Vercel Agent can now join Slack with the full production context of your apps and agents.
βͺοΈ Add @ππππππ to any thread
βͺοΈ Create plans and PRs
βͺοΈ Roll back deploys and update configs
vercel.com/blog/introducing-β¦
Will Viles retweeted
Iβve been using fx.sh as my daily driver and itβs a one-way street.
Itβs 10-20x smaller than the major coding CLIs. It starts up instantaneously. It feels more like using π£ππ than an IDE in your terminal. Itβs embeddable anywhere, even your browser via WebAssembly.
And of course itβs open source and model-agnostic. Itβs experimental, but give it a shot and let us know how it goes!
Introducing fx, a tiny, open, native coding agent from Vercel Labs.
Originally an internal tool, fx is a harness and CLI written in Zig, optimized for research and embedding in larger systems. Today, we're open sourcing it.
fx is built on three principles:
1. Fast. A single native binary, no runtime to install. It cold starts in 10Β΅s and does no unnecessary work or I/O before accepting input. fx is the answer to "how fast can a coding agent be?"
2. Light. The 6.3MiB binary uses single-digit megabytes of memory at baseline, made for instant installation and embedding in resource-constrained environments and agent sandboxes.
3. Open. Apache-2.0, model and provider agnostic, suitable for local and cloud inference. Its small core extends through skills, plugins, and MCP.
Minimalism is an obsession throughout the entire harness: system prompt, tools, features, binary. The goal was to keep context usage and time to first token low, and make fx optimal for model benchmarking, sandboxing, evals, and gyms.
You can use fx directly or embed it as infrastructure. The CLI feels more like a Unix shell than an IDE in the terminal: it preserves scroll history, produces minimal output, and uses complex TUI rendering very, very sparingly. Programmatically, ππ‘ πππ --ππππ gives structured output, ππ‘ πππ connects to editors and other clients, and WebAssembly can even run the whole thing inside the browser (see: fx.sh/try).
Privacy is a design constraint: no product telemetry, sessions and usage stay local, and no source code or prompts are shared with any endpoint other than inference. With local inference and auto-updates off, fx is fully hermetic.
fx is experimental. Use at your own risk and expect frequent changes. Chat with us on X (fx.sh/xchat) or file issues (fx.sh/issues).
ππππ -ππππ» ππ‘.ππ/πππππ.ππ | ππππ
fx.sh/
Will Viles retweeted
You can now host your repos in Cursor Origin and deploy to Vercel via Cursor Origin which is itself hosted on Vercel. And unlike GitHub, it's online π
Replying to @cursor_ai
We've partnered with some of the top GitHub integrations.
Vercel, Buildkite, and Depot are already available with more coming soon.
Will Viles retweeted
We built an agent that powers our company's internal operations called @π.
Every day-to-day job at Vercel now involves @π. It's growing exponentially both in daily interactions and token use.
One can extrapolate to the day AI agents run entire companies from here. It's an expert in finance, comms, docs, marketing, engineering, business analytics. It's seeded by the skills we gave it and we update, but it's also constantly improving.
It already keeps memories and personalized workflows and schedules on a per-user basis. For example, I knew skillsβ .sh hit 1M skills and I shared this on these forums because I asked @π to periodically check and remind me.
It's powered by and is also the basis for the design of @eve. We built this, it works fantastically well, we think every company should have it.
Before you @ me, I know you could also do this by picking your 'BigAI slack integration' du jour. But that's not your agent, that's their agent. If agents become the foundation of (and even synonymous with) modern companies, you being in complete control, from source β runtime β data β token, seems like a pretty big deal to me.
Will Viles retweeted
We then win it 3-2 on penalties!
Good to have you, @FCBarcelona π€
Holding @FCBarcelona to a draw. A superb shift. π
Penalties comes next.
FIFA is a governing body - it should regulate the sport in the best interest of the game and all of its stakeholders.
It should not be primarily a commercial entity, only appeasing private investors.
A seismic split in world football will occur if Infantino pushes this further.
Will Viles retweeted
Vercel Connect mints scoped, short-lived tokens for access to 100+ platforms and services.
Securely connect your apps and agents to Shopify, Okta, Jira, and more.
vercel.com/changelog/vercel-β¦



























