DEV Community: Vildan Bina

Bursora, a tool that blocks AI spend before the call, not after the bill

Vildan Bina — Sun, 05 Jul 2026 19:36:25 +0000

One of my AI features got stuck in a loop and spent way more than it should have. I found out the next morning, from the provider dashboard.

That's the problem with every cost tool I tried. Helicone, Langfuse, the provider dashboards. They all show you the bill after it's already spent.

I wanted one that says no before the call goes out. So I built it and made it open source. It's called Bursora.

The idea

Check the budget first. If the call would go over your limit, block it. If not, let it through and record what it cost.

A traffic light, not a speed camera.

The whole setup

Install it:

npm i @bursora/sdk openai

Wrap your client once:

// lib/openai.ts
import OpenAI from "openai";
import { wrap } from "@bursora/sdk";

export const openai = wrap(new OpenAI(), {
  apiKey: process.env.BURSORA_API_KEY!,
  endpoint: process.env.BURSORA_ENDPOINT!,
});

That's it. You still call the API the same way you always did:

await openai.chat.completions.create({
  model: "gpt-4o-mini",
  messages: [{ role: "user", content: "hi" }],
});

Each call asks "can I spend this?" first. On yes, it goes straight to OpenAI. No proxy. Your traffic never touches my servers. After the call, it reports the real token cost back.

When you hit a limit

The call throws before it ever reaches the provider:

import { BudgetExceededError } from "@bursora/sdk";

try {
  await openai.chat.completions.create({ /* ... */ });
} catch (err) {
  if (err instanceof BudgetExceededError) {
    // handle it your way
  } else {
    throw err;
  }
}

So a runaway loop stops itself instead of billing you for 10,000 calls.

Finding who spent it

One big number tells you nothing. Tag your calls, and spend gets grouped by customer, agent, or workflow:

import { withTags } from "@bursora/sdk";

await withTags({ tenant_id: "acme", agent_id: "support-bot" }, async () => {
  await openai.chat.completions.create({
    model: "gpt-4o-mini",
    messages: [{ role: "user", content: "hi" }],
  });
});

Now a spike has a name.

If Bursora is down

Your call still goes through. I never want this to be the reason your app can't reach OpenAI. It just misses tracking that one call.

The license

The dashboard is Apache-2.0, the SDK is MIT. You can self-host all of it on your own Postgres, no feature gates. One billing module is under a separate commercial license, but self-hosters don't need it and the open build leaves it out. Saying that plainly so nobody feels tricked when they read the tree.

Still rough

Pricing sync only covers the big providers right now. For a smaller model you might have to set the token cost by hand for now.

Self-host it: https://github.com/bursora/core
Docs: https://bursora.com/docs

If you've been hit by a surprise AI bill, I'd like to hear how you found out.

Passmuse: AI-Powered Passwords You’ll Actually Remember

Vildan Bina — Sun, 27 Jul 2025 15:11:56 +0000

What’s the Real Cost of “Forgot Password?”

Every developer and every user, knows the drill:

Hit “Forgot Password?”
Check email.
Create a new one.
Repeat in 2–4 weeks.

Organizations spend millions annually on support tickets, password resets, and driving users toward insecure hacks like “Password123” or “Fluffy2025!”. Meanwhile, your users are frustrated, unproductive, and more likely to nickel and dime around security best practices.

Introducing Passmuse: The AI-Powered Password Muse

Passmuse solves the core tension between memorability and security with a simple promise:

Passwords as memorable stories, not random gibberish.

Context Aware: Every character ties back to something only you know.
Cryptographically Strong: 80+ bits of entropy, NIST-compliant.
Zero Storage: We never persist your passwords in plaintext.
Instant Copy & Go: No SDKs, no redirects, just generate and paste.

Whether you’re a freelancer juggling 30+ logins or an enterprise rolling out thousands of credentials, Passmuse makes strong passwords feel effortless.

3 Generation Modes to Fit Your Workflow

1. Wizard Mode (🧙‍♂️)

A 7-step guided experience that takes you from “I need a password” to “I’ll never forget this.”

Choose a mood: Cozy campfire, midnight coding, beach sunrise.
Select secret triggers: Your first pet’s nickname, a milestone year.
Watch AI weave it into a mini story every word hints at a character.

2. Personal Mode (✨)

Fast and focused: feed Passmuse a handful of personal cues, and get back a password you inherently remember.

Favorite movie title
Childhood street name
Lucky number

3. Custom Mode (🎨)

For creatives and power users: describe any scene, feeling, or concept.

“A rainy afternoon painting neon cityscapes.”
AI crafts a password that encapsulates that image.

Why Developers Love Passmuse

Slash Support Tickets Users remember their own passwords, no more “Forgot Password?” tickets clogging your help desk.
Enforce Enterprise Grade Security Built-in entropy checks ensure compliance with PCI, HIPAA, and NIST guidelines.
Seamless Integration Share a single link or embed our lightweight widget. No backend changes, no heavy SDKs.
Data Privacy by Design Personal cues are encrypted on your device. Only you ever see the full password.

Real-World Wins

“I haven’t reset a password in 6 months!”
– Jane D., Full-Stack Engineer

“Our onboarding time dropped 40%.”
– CTO, Fintech Startup

Whether it’s a one person shop or a 10,000 seat enterprise, Passmuse scales with your needs.

How It Works (In a Nutshell)

You choose Wizard, Personal, or Custom mode.
AI generates a contextual story + password.
You copy the password once, no storage on our servers.
You remember the story, not a random string.

Ready to Tell Your Password’s Story?

What’s the funniest or most meaningful password you’ve ever used? Drop a comment below or share your memory hack in the thread, let’s spark a conversation about making security both strong and human.

Upgrade All Your Composer Dependencies with a Single Command!

Vildan Bina — Sun, 02 Mar 2025 02:05:27 +0000

Hey PHP community,

I'm excited to introduce Composer Upgrader v1.0.0 — a new Composer plugin that streamlines your dependency management. With just one command, composer upgrade-all, you can upgrade patch, minor, major, or even specific packages effortlessly.

Why You'll Love It:

Simplicity: No more juggling multiple commands. One command, all dependencies upgraded.
Flexibility: Choose to upgrade all packages or target specific ones.
Efficiency: Keeps your projects up-to-date with minimal effort.

Getting Started is Easy:
Install it using:

composer global require vildanbina/composer-upgrader

Give it a try and let me know your thoughts. Happy coding!

Check out the full details and contribute on GitHub.