Agent builders got a whole architecture playbook this week: The Log Is the Agent reframes agents as resumable event histories, Don’t Trust Large Context Windows reminds us that “1M tokens” is often marketing math, and AI Demands More Engineering Discipline, Not Less makes the case that faster code generation means stricter systems thinking, not looser standards.
Security and reliability stayed loud: A Backdoor in a LinkedIn Job Offer shows how a fake recruiting flow can weaponize dependency installs, Stop Using JWTs challenges default auth habits, and The Only Scalable Delete in Postgres Is DROP TABLE is the kind of data lifecycle advice you wish you had before your first massive cleanup job.
Also in this issue: A New Era For Software Testing, How TanStack Cut TypeScript Type-Checking Work by Up to 86%, TypeScript 7.0 RC, MDN MCP Server, Lore, Eve, and NUB all point in the same direction: better tooling, sharper feedback loops, and fewer excuses for chaotic engineering.
Enjoy!
Signup here for the newsletter to get the weekly digest right into your inbox.
Find the 14 highlighted links of weeklyfoo #142:
Stop Using JWTs
by samsch
JWTs were never designed for session management — traditional cookie sessions are more secure, more flexible, and avoid the false promise of stateless auth
🚀 Read it!, security, engineering
The Log Is the Agent
by TLDR
The agent is the history of events that make up its data — this log concept lets agents be reconstructed and resumed, unlocking capabilities that make advanced agent use cases easier to reason about
📰 Good to know, ai, agents, engineering
The Only Scalable Delete in Postgres Is DROP TABLE
by PlanetScale
Large DELETEs leave dead tuples, add replication overhead, and don't return disk space — structure your schema so bulk deletion becomes a DROP or TRUNCATE
📰 Good to know, postgres, database, performance
Don't Trust Large Context Windows
by Garrit Franke
LLMs have a reliable smart zone that degrades past roughly 100k tokens — effective attention is a small fraction of the advertised window size
📰 Good to know, ai, llm, performance
AI Demands More Engineering Discipline, Not Less
by Charity Majors
AI makes generating code fast and disposable, shifting us from obsessing over individual lines to managing entire systems — this demands more rigor, not less
📰 Good to know, ai, engineering
A Backdoor in a LinkedIn Job Offer
by roman.pt
A developer was targeted by a fake recruiter requesting a code review for a malicious GitHub repo — installing dependencies would silently execute a remote payload
📰 Good to know, security
A New Era For Software Testing
by Salvatore Sanfilippo
antirez on using AI agents as QA engineers — writing markdown specs that direct agents to exercise the full build on each release, replacing brittle scripted tests
📰 Good to know, ai, testing
How TanStack Cut TypeScript Type-Checking Work by Up to 86%
by TanStack
Using tsc diagnostics to find and eliminate expensive generic chains in TanStack Table v9 — concrete techniques reusable in any type-heavy library
📰 Good to know, typescript, performance, react
You Got Faster, Your Company Didn't
by Terrible Software
AI makes individual developers dramatically more productive but organizational structures built for slower output haven't adapted — the bottleneck has moved from writing code to reviewing, merging, and coordinating
📰 Good to know, ai, engineering, productivity
TypeScript 7.0 RC
by Microsoft
The release candidate ships the Go-based rewrite — 10x faster type-checking with no code changes required
📰 Good to know, typescript, javascript
MDN MCP Server
by MDN Team
Bring MDN's web platform documentation and browser compatibility data into any AI agent or IDE — accurate up-to-date answers instead of relying on stale model training data
🧰 Tools, mcp, ai, tools, web
Lore
by Epic Games
Epic Games' open-source version control system optimized for projects combining code with large binary assets — verifiable tamper-evident history with an interface built for both developers and artists
🧰 Tools, tools, git, gamedev
Eve
by Vercel
Vercel's open-source agent framework with built-in durable execution, sandboxed computing, and human-in-the-loop approvals — agents are defined as a directory of files specifying components, actions, and connections
🧰 Tools, tools, ai, agents
NUB
by Colin McDonnell
All-in-one toolkit from Zod's creator that augments Node.js — adds full TypeScript support beyond type stripping, faster and more secure package installation, and richer .env handling without replacing your package manager
🧰 Tools, nodejs, typescript, tools
Want to read more? Check out the full article here.
To sign up for the weekly newsletter, visit weeklyfoo.com.
Top comments (1)
Some comments may only be visible to logged-in visitors. Sign in to view all comments.