爱窝啦 AI 日报

Today’s Summary

ZCode's upload of project history triggered company legal notices. Zhipu claims it's for creating repo wikis, but privacy concerns keep escalating.
From local dev environments to AI security audits, open-source tools and product features are letting agents take over developers' daily operations.
Today we're covering the ZCode incident and Cloudflare Quick Tunnels—the latter turns local pages into online links without registration.

🔥 Today’s Top 10 Focus

1. ZCode’s Project History Upload Triggers Company Legal Notice

Privacy controversy keeps fermenting. Juejin users reported that ZCode’s project history upload triggered company legal notices . Companies have publicly issued letters demanding explanations. Zhipu says the feature is for creating repo wikis. Veteran Pro members are watching how this plays out legally.

2. Chinese Gas Turbines Seen as Key to AI Power Supply

AI data center power shortage is closing in. According to 36Kr, Chinese gas turbines are seen as key to AI power supply . Musk predicted at the G20 that next year will see obvious global power shortages—AI chip capacity is growing 40%-50% annually while available power supply outside China only grows 10%-20%. Gas turbines can be deployed quickly, making them a fallback for easing compute center power bottlenecks.

3. Hands-On Comparison of Doubao, WorkBuddy, and Qianwen Office

Doubao wins on versatility, WorkBuddy on stability. 36Kr tested four job categories—marketing, content ops, product, and dev—and published hands-on comparisons of Doubao, WorkBuddy, and Qianwen Office . WorkBuddy’s open platform has onboarded over 100 ecosystem partners and supports smart glasses, voice recorders, and a dozen hardware types. Qianwen Office crossed 30 million users but still needs work on complex task execution.

4. Developer Deploys sing-box Subscription Service with Codex

One prompt does the whole deployment. Xiang Yang Qiao Mu tweeted that after buying an overseas host, just tell Codex the IP and root password . The prompt asks to install sing-box and generate config files. A few minutes later you get a yaml subscription URL. Vultr runs $10/month, Hostinger about 500 RMB/year. Works as a backup VPN or a vibe coding test environment.

5. Cloudflare Quick Tunnels Puts Local Pages Online Directly

No domain or server needed. Gorden Sun explains that Cloudflare Quick Tunnels puts local pages online directly . No registration required, can toggle on/off anytime. Solves the awkward moment when non-programmers share vibe coding pages with localhost:8000. Let the agent handle the config itself.

6. tw93 Manually Tests Uninstalling 300+ Apps for Mole

AI-era engineers still need manual validation of residue cleanup. Xiang Yang Qiao Mu retweeted tw93’s experience: tw93 manually tested uninstalling 300+ apps for Mole , split into 30 groups. Had the Extra High Fast model use computer use to install each one, check directories, uninstall, and hunt for leftovers. The AI even proactively wrote scripts to optimize its own workflow. Repetitive work, but big payoff for product UX.

7. Baoyu Uses GPT-6 Astra to Create 3D Web Page for Peach Blossom Spring

One prompt builds an interactive 3D scene. Baoyu shared on Twitter that he used GPT-6 Astra to create a 3D web page for Peach Blossom Spring , paired with CCTV’s Li Lihong narration and timestamps. Visuals got mixed reviews, but completing a full three.js page with one prompt is pretty efficient. The prompt and method are publicly shared.

8. Developer Implements Semantic Search for Local Photo Library

No more filename hunting—type “seaside at dusk” and find your pic. Juejin author Yizhimaobou published a tutorial: after integrating Lanyun generative models, you can search local photos with natural language . The pipeline is layered: directory traversal, hash deduplication, and compression stay local; image descriptions and tagging go to the vision model; search condition parsing goes to the text model. Full code and Lanyun API integration are open-sourced.

9. Xiang Yang Qiao Mu Says AI Content Gets More Attention Than Robots

Embodied intelligence discussions run cold compared to software apps. Xiang Yang Qiao Mu tweeted that people prefer AI software content —robot topics get lukewarm responses. Even though official demo videos show impressive robot capabilities, LLMs are still far from truly covering embodied intelligence.

10. User Hits ChatGPT Web Access Limit

Chat too much and you might trip the controls. A V2EX user reported that ChatGPT’s web interface showed an access restriction message , suspecting high chat frequency. The screenshot shows a prompt asking users to try again later. No official word yet on exact trigger conditions.

⌘ Top Open Source Projects

BuilderIO/agent-native: Agent Application Framework

TypeScript framework designed specifically for agent development. agent-native gained 98 stars today , bringing the total to 5,212. Provides standardized interfaces and toolchains to help developers quickly build agent apps. Great for teams exploring agent application architectures.

vercel-labs/json-render: Generative UI Framework

Renders JSON descriptions directly into interfaces. json-render gained 291 stars today , bringing the total to 17,307. This TypeScript framework from Vercel Labs lets AI output JSON-formatted UI descriptions that the framework parses and renders. Perfect for AI products that need dynamically generated interfaces.

◉ Social Media Highlights

Baoyu Responds to Peach Blossom Spring 3D Project Reviews

Sharing prompts and methods matters more than visuals. Baoyu responded in a tweet: Many said Peach Blossom Spring didn’t look good, so I made a “Bull’s Here” version . He admits his 3D skills aren’t great, but the point is to share the prompt and method. That GPT-6 Astra can one-shot a complete interactive 3D webpage from a single prompt is already pretty impressive.

Cloudflare Open-Sources security-audit-skill

Lets agents auto-complete multi-stage code security audits. Gorden Sun explains that Cloudflare’s open-source security-audit-skill turns coding agents into security auditors . By isolating sub-agents for collaboration, independent validation agents perform falsification checks on vulnerabilities to reduce false positives. Supports incremental scanning and outputs structured confirmed defects and pending validation records.

Baoyu Retweets Jev Founder on RLHF Talk

RLHF optimizes human preferences but isn’t fit for automation. Baoyu retweeted Lu Sanjin’s post: Jev founder Diogo Almeida argues in his talk that RLHF took LLMs on a big detour . RLHF excels in human-machine interaction but sucks at automation—humans must stay in the loop. He advocates optimizing calibrated decision-making ability, not pure correctness or human preference. Video translation by BaoCut.

😄 AI Fun Facts

White House Spent 85 Days Negotiating AI Regulation with Anthropic

Politico published an in-depth investigation today reconstructing the regulatory battle between the Trump administration and Anthropic over the Mythos model from April to July. The model could discover security vulnerabilities at extreme speed. After Microsoft got access in late March, they privately warned the government: regular people could now launch complex attacks previously executable only by elite hackers. The Treasury Secretary convened CEOs of the five biggest banks overnight. The White House held a Situation Room meeting. VP Vance called tech executives. An administration that had waved the “let AI run free” flag suddenly realized AI could also be a weapon aimed at its own economic lifelines. The eventual executive order had a rocky path. Politico interviewed over a dozen participants to reconstruct those 85 days . That framework is already being left behind by newer models.

❓ Related Questions

Does Cloudflare Quick Tunnels Require Registration?

No. Cloudflare Quick Tunnels can be used directly without registering a Cloudflare account. Developers just visit https://try.cloudflare.com/ and follow the instructions to open a local localhost address as a publicly accessible online link. The connection can be shut down anytime—perfect for temporarily sharing local dev pages or vibe coding results.

For comparing publicly available AI accounts or subscription services, check Aivora · AI Account Store . Products, prices, and availability are subject to the official site’s real-time page.