frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Open in hackernews

Launch HN: Vendo (YC S26) – Let users build features on top of your product

https://github.com/runvendo/vendo
7•yousefh409•37m ago
Hi HN, we’re Yousef & Nour, founders of Vendo (https://vendo.run). Vendo lets users create new features inside the software they already use. A user describes the dashboard, workflow, or small app they need, and Vendo builds it on top of the product’s existing data, API, and interface.

Demo: https://www.youtube.com/watch?v=VdpHehY64ls

We built Vendo because every SaaS eventually faces the same problem: every customer needs something slightly different. One wants a new report and another needs a workflow that only makes sense for their team. These requests either sit on the roadmap, become one-off engineering work, or force the customer into spreadsheets and external tools. We wanted the user to be able to create the missing feature themselves, without leaving the product.

Here is how it works:

- npx vendo init reads the product's API surface, theme, routes, and more. These are used so that the apps Vendo creates (1) look on-brand and native and (2) have the ability to read data and perform actions directly through the company's API

- When a user asks for a feature, we have a custom Vendo harness that writes a React component with a bunch of Vendo add-ons and guardrails (ex. ability to make calls to the host API + our component library). Every save is compiled, type-checked, run against real API responses, and rendered before the user sees it. We just released a benchmark and write-up here with more info for anyone interested: https://vendo.run/blog/generating-product-ui-measured

- We use QuickJS to make sure that anything the agent creates is sandboxed and can't mess with the company's site. Vendo compiles the component and runs it with Preact inside a QuickJS VM with no access to the DOM, network, or clock. The VM returns a UI tree, which the host renders using the product’s registered components. When the user clicks something, QuickJS emits a tool call; the host executes it through Vendo’s guard and passes the result back into the same VM, preserving the screen’s local state.

There's a lot of generative UI right now: streaming developer-written components into a chat (Vercel AI SDK, CopilotKit, Thesys), or rendering your app inside someone else's assistant (OpenAI Apps SDK, MCP Apps). We differ on two things. Vendo lives in your product and acts through your API as the signed-in user, so what it makes is durable: real apps users keep, pin, and run on triggers while they're away, and not components that are merely confined to a chat. Plus, it's not capped at putting together a bunch of prebuilt components: the agent can build arbitrary apps, from a quick dashboard out of your own components to real custom code running in a sandbox, and either way data only ever comes from tool calls to your API.

Here are some things customers are using Vendo for today:

- Letting their users create custom dashboards and reports. These are mainly UI-based and focused on letting the user see the exact graphs and metrics they care about

- Letting their customers create recurring automations. A big thing as well that has been used for these automations is the fact that we connect to external connections, so users have been automating many of their inter-tool workflows (ex. an automation that sends a slack alert based off of something in the product)

- B2B customers letting their customers customize the product with specific business logic. Often this is simple things like an extra field on a form, or an extra permission, but it is hard for a business to keep up with them otherwise.

- Creating and sharing custom dashboards/apps across an organization. Since the apps Vendo creates are durable, they can be shared, reused, and forked (which can’t be done with many of the other in-chat generative UI solutions)

We've spent a lot of time thinking about how AI and agents will change the way people consume software. We think the answer is personal(ized) software: you see the UI you need to see, you tell an agent exactly what you need, and the product molds to how you work.

The key insights that have enabled the product to work are:

- A rule in code always beats a rule in a prompt.

- Invent as little syntax as possible. Generation got faster and more reliable when the output looked like what models already know (JSX-shaped markup) instead of a clever custom format.

- Deterministic beats model wherever you can get away with it. Theme extraction is pure static analysis, and a remix starts as a copy of your component, no model call.

Vendo is completely open-source (Apache-2.0) and can be self-hosted, so feel free to check out all the source code here: https://github.com/runvendo/vendo.

Would love you to try it out and give us your feedback: https://docs.vendo.run/. Or if you’re a company looking to embed Vendo in your product feel free to book a call here: https://cal.com/team/vendo/intro-call

Comments

blakeashleyjr•11m ago
What benefit does this provide over an excellent API + MCP access?

I often find my users want to throw their Claude at it and have everything handled. Users have even developed their own local UIs using Claude Design. As long as they are within the bounds of the MCP I already provide access to, no problem. This also has the added benefit of using the AI subscription the org already pays for (or using the customers).

Edit: Congrats on the launch and thanks for open sourcing!

AliExpress runs silent WebAudio fingerprinting that breaks Bluetooth multipoint

https://blog.laserphile.com/2026/08/aliexpress-webpage-keeping-multipoint.html
514•emctech•5h ago•166 comments

I like 'em thick: an apology to my English teachers

https://www.experimental-history.com/p/i-like-em-thick
49•Ariarule•2d ago•4 comments

Show HN: I trained a 125M model to autocomplete piano on-device

https://simedw.com/2026/08/20/midi-autocomplete/
267•simedw•4h ago•68 comments

Malicious Rust crate Arrayref runs a build-time payload

https://safedep.io/arrayref-proc-macro1-rust-build-time-malware/
222•abhisek•2h ago•167 comments

HTML Can Do That

https://chrisburnell.com/html-can-do-that/
131•encyclopedism•1d ago•23 comments

CIA funding helped keep NeXT afloat in the 80s

https://www.wsj.com/tech/steve-jobs-apple-next-cia-161b65f9?st=NWWds1&reflink=desktopwebshare_per...
77•EwanG•15h ago•23 comments

DiffusionGemma Technical Report

https://arxiv.org/abs/2608.00146
63•gmays•2h ago•11 comments

How to compromise your system with a job interview

https://www.codedge.de/posts/how-to-compromise-your-system-with-a-job-interview
9•codedge•16m ago•0 comments

Hacking with Claude on a $27 Smart Watch

https://www.mikekasberg.com/blog/2026/08/19/hacking-with-claude-on-a-27-smart-watch.html
39•speckx•1h ago•21 comments

Clean up Claude 5's token vomit with a separate LLM

https://github.com/zachahn/vomit
26•Bluestein•41m ago•8 comments

Xorg-Server 26.0.99.901

https://lists.x.org/archives/xorg-announce/2026-August/003741.html
40•st_goliath•3h ago•7 comments

Every Model Cheats

https://dreadnode.io/research/every-model-cheats-prompt-level-mitigation-of-cheating-on-offensive...
24•vga805•2h ago•13 comments

Launch HN: Vendo (YC S26) – Let users build features on top of your product

https://github.com/runvendo/vendo
7•yousefh409•37m ago•1 comments

Proof of Human (YC S23) Is Hiring a Member of Technical Staff

https://www.ycombinator.com/companies/proof-of-human/jobs/ZTZHEbb-member-of-technical-staff
1•timshell•4h ago

Double-double: 31 digits of precision without leaving the FPU

https://marekfiser.com/blog/double-double-arithmetic/
15•iliketrains•3d ago•2 comments

An elliptic curve of rank ≥ 30

https://elliptic-rank.icarm.cloud/curve/273
27•robinhouston•1h ago•10 comments

Mojo is now open source

https://www.modular.com/blog/mojo-open-source
201•visheshdembla•1d ago•53 comments

Windows brings out the Rorschach test in everyone (2003)

https://devblogs.microsoft.com/oldnewthing/20030825-00/?p=42803
303•luu•9h ago•106 comments

Git at any scale

https://cursor.com/blog/git-at-any-scale
106•meetpateltech•1d ago•7 comments

Bun 1.4

https://bun.com/blog/bun-v1.4
115•meetpateltech•1h ago•50 comments

Why the Ocean Cleanup hasn't solved the plastic pollution crisis

https://therevelator.org/why-ocean-cleanup-has-not-solved-plastic-pollution/
46•sohkamyung•3h ago•41 comments

Anti-AI fonts are useless and harmful

https://blog.yaros.ae/anti-ai-fonts-are-useless-and-harmful/
9•speckx•1h ago•3 comments

Show HN: Check if any of the $656M in unclaimed royalties at The MLC is yours

https://pub.doub.ly/
18•knaught•1h ago•4 comments

Nearly 1,400 live streams from Japan

https://tomarigi.me/
48•pajop•2d ago•9 comments

Theory of Fluids Enters the 21st Century

https://www.quantamagazine.org/theory-of-fluids-enters-the-21st-century-20260817/
36•librasteve•3d ago•3 comments

Stop Anthropomorphizing Intermediate Tokens as Reasoning/Thinking Traces

https://arxiv.org/abs/2504.09762
106•nunodonato•1d ago•26 comments

Generic Methods in Go 1.27

https://dominik.info/blog/go-generic-methods
4•EspressoGPT•25m ago•0 comments

An American Mosaic (interactive map of ancestry census data)

https://www.nytimes.com/interactive/2026/07/01/us/america-ancestry-census-data-map.html
22•cckolon•3d ago•4 comments

Stwipe Acquires OpenWouter

https://stwipe.com/
150•eatonphil•2h ago•18 comments

Show HN: Open-source Stripe Connect alternative

https://zoneless.com
19•tinyprojects•1h ago•9 comments