Product Designer - Marketplace

Vercel's AI SDK ships Web Fetch Tool that works across any AI model. Vercel's AI SDK adds a first-party web fetch tool that returns pages as markdown, works with any function-calling model, and ships with domain allowlists. · 1 day ago Read 6 min * Vercel AI SDK adds a Web Fetch Tool that works with any function-calling model. * Pages are returned as markdown using defuddle, cutting token usage versus raw HTML. * Install via pnpm add @ai-sdk/tool-web-fetch, requires Node.js 22.13 or newer. * Security controls: allowedDomains, blockedDomains, requireUrlInUserMessage, and DNS rebinding protection on Node. * Supports HTML, text, JSON, XML, CSV; no PDFs, binaries, or JavaScript-rendered pages. * Built-in pagination via offset with short-lived per-instance cache; default 50k char limit, 10 MiB cap. Vercel's AI SDK team has released a first-party tool that lets agents fetch publicly reachable web pages with any AI SDK model that supports tool calling. The Web Fetch docs describe an integration that accepts a URL, retrieves the page, removes common boilerplate, and returns content the model can process. For server-rendered, text-based pages, the package can replace a custom scraping service, headless browser, or HTML-to-text pipeline. It runs as a standard AI SDK tool, so the same integration continues to work when an application changes model providers. A small integration surface. Install the separate package, register the tool with generateText, streamText, or ToolLoopAgent, and set a step limit to prevent an unbounded tool loop: npm install @ai-sdk/tool-web-fetch import {experimental_createWebFetchTool as createWebFetchTool,} from '@ai-sdk/tool-web-fetch'; import {generateText, isStepCount} from 'ai'; const result = await generateText({ model, tools: {webFetch: createWebFetchTool,}, stopWhen: isStepCount(5), prompt: 'Summarize https://ai-sdk.dev/docs/introduction.',}); console.log(result.text); The exported factory currently carries an experimental_ prefix, so teams should treat its API as subject to change. The isStepCount(5) condition caps the number of model and tool steps during this run. Cleaner input, fewer tokens. The tool requests Markdown by sending Accept: text/markdown. When a server returns HTML, the package uses Defuddle to extract the main content and remove navigation, footers, scripts, and other page furniture. | Response type | Tool behavior | | Markdown | Returns the server-provided content directly. | | HTML | Extracts the main content and converts it to Markdown. | | Plain text, JSON, XML, or CSV | Returns the text without conversion. | | PDF, image, audio, video, or another binary format | Rejects the response as unsupported. | Removing HTML tags, inline styles, scripts, and tracking markup reduces the tokens consumed by each page. The savings grow when an agent fetches several URLs within one tool loop. The model calls the tool with {url, offset?}. A successful response includes the requested URL, final URL after redirects, content type, title, extracted content, and pagination metadata. Failures return structured error information that the model can use to revise the URL or choose another source. Long pages stay bounded. Each call returns up to the configured maxLength, which defaults to 50,000 characters, and applies a 10 MiB response ceiling. When a document exceeds the character limit, the response provides an offset that the model can pass into a subsequent call. Processed documents are cached for a few minutes within each tool instance, allowing offset requests to continue reading without downloading and converting the page again. The cache belongs to that instance rather than serving as a shared application cache. Guardrails for hostile content. Fetched text must be treated as untrusted input because a page can contain instructions intended to override the agent's task. A compromised model could also place sensitive data in a query string and request an attacker-controlled URL. * allowedDomains limits requests to specified domains and their subdomains. * blockedDomains denies requests to listed domains. * requireUrlInUserMessage permits only URLs found in user messages. URLs introduced by system prompts, assistant messages, fetched pages, or tool results remain ineligible. * AI SDK tool approval can require a person to authorize each fetch. Domain restrictions are checked again across redirects. The transport also sends GET requests without cookies or credentials, rejects URLs containing embedded credentials, and blocks private or reserved addresses such as localhost and cloud metadata endpoints. On Node.js, the tool validates resolved IP addresses when the connection opens. This check reduces DNS rebinding risk, where a hostname initially resolves to a public address and later resolves to an internal service after validation. Choose controls by workflow. * User-submitted URL summaries: Enable requireUrlInUserMessage, add an allowlist when the expected domains are known, and consider approval for sensitive environments. * Citation-following research agents: Disable requireUrlInUserMessage only when the agent must follow links discovered in search results or fetched pages. Constrain egress with domain rules, a proxy, or network policy. * Internal applications: Keep private address blocking in place and avoid passing session cookies or service credentials through a custom transport. Where fetching stops. * No web discovery: The tool retrieves a known URL. Agents that need to find sources require a separate search tool. * No JavaScript execution: Client-rendered applications may return an empty shell or incomplete content because the package does not run a browser. * No authenticated browsing: Requests omit cookies and credentials, so pages behind a sign-in flow are generally unavailable. * No binary extraction: PDF-heavy workflows still need a document parser or dedicated ingestion pipeline. * Imperfect content detection: Automatic extraction can select the wrong section on unusual layouts. Known page structures can use an option such as defuddleOptions.contentSelector: 'article'. Portability without provider lock-in. Provider-native browsing features vary in their search, retrieval, citation, and execution behavior. The AI SDK implementation focuses on fetching known URLs inside the application's process, giving developers direct control over domain policy, logging, caching, and network routing. | Concern | AI SDK Web Fetch | | Model support | Any compatible model with tool calling | | Execution | The application's runtime | | URL discovery | Requires a separate search source | | Network control | Domain rules and a customizable fetch implementation | | Content handling | Text responses and extracted HTML | A custom fetch implementation can route traffic through a proxy or existing egress layer. Normal model, bandwidth, and compute costs still apply, while the application avoids depending on a provider-specific browsing interface. The package also complements the Bash Tool docs, which cover command execution in environments such as Vercel Sandbox or the in-memory just-bash runtime. One tool retrieves web content; the other runs code against files and command-line programs. A production checklist. * Pin package versions while the factory remains experimental. * Set stopWhen and choose a suitable maxLength. * Enable domain restrictions and requireUrlInUserMessage where the workflow allows them. * Log requested URLs, final redirect URLs, content types, tool errors, and approval decisions. * Test redirects, oversized documents, client-rendered pages, malformed content, and prompt injection attempts. * Provide separate tools for search, PDFs, authenticated pages, or browser-rendered applications. For existing AI SDK applications, integration requires one package and one tool registration. Production deployment also requires explicit egress rules, bounded tool loops, and testing against the page types the agent will encounter.

Nightview Capital LLC makes new Investment in Shopify Inc. $SHOP. October 21, 2026 Key points. * Nightview Capital LLC acquired 33,180 Shopify shares worth approximately $4.92 million in the third quarter, making Shopify about 3.7% of its portfolio. Institutional investors and hedge funds collectively own 69.27% of the company. * Shopify reported quarterly revenue of $3.58 billion, up 33.7% year over year, and earnings of $0.42 per share, beating estimates. Analysts remain broadly positive, with a "Moderate Buy" consensus rating and an average price target of $175.89. * The stock has risen sharply and trades at a high valuation, with a P/E ratio of 117.22 and a beta of 2.62. While AI initiatives, platform expansion and improving earnings expectations support growth, the recent rally increases the risk of volatility or profit-taking. * Want to know the moment analysts change their view on Shopify? Get MarketBeat All Access for $149 a year and keep that rate for life. Nightview Capital LLC bought a new position in Shopify Inc. (NASDAQ:SHOP - Free Report) TSE: SHOP during the 3rd quarter, according to the company in its most recent filing with the Securities and Exchange Commission. The firm bought 33,180 shares of the software maker's stock, valued at approximately $4,921,000. Shopify accounts for about 3.7% of Nightview Capital LLC's portfolio, making the stock its 12th biggest position. A number of other institutional investors and hedge funds have also recently bought and sold shares of the company. Norris Financial Group LLC bought a new position in Shopify in the 1st quarter worth approximately $1,586,000. Infusive Asset Management Inc. lifted its holdings in shares of Shopify by 27.4% during the first quarter. Infusive Asset Management Inc. now owns 43,611 shares of the software maker's stock worth $5,173,000 after buying an additional 9,374 shares during the last quarter. OMERS ADMINISTRATION Corp boosted its position in shares of Shopify by 18.6% in the first quarter. OMERS ADMINISTRATION Corp now owns 58,044 shares of the software maker's stock valued at $6,876,000 after acquiring an additional 9,096 shares during the period. Ninepoint Partners LP bought a new stake in shares of Shopify in the second quarter valued at approximately $29,027,000. Finally, The Manufacturers Life Insurance Company boosted its position in shares of Shopify by 8.5% in the first quarter. The Manufacturers Life Insurance Company now owns 8,418,903 shares of the software maker's stock valued at $998,137,000 after acquiring an additional 660,198 shares during the period. Institutional investors and hedge funds own 69.27% of the company's stock. Shopify news summary. Here are the key news stories impacting Shopify this week: * Analyst optimism and earnings outlook: Zacks upgraded Shopify to a #1 (Strong Buy) rating, citing improving earnings prospects. Other coverage points to expected revenue growth of approximately 31.5% this year, rising earnings estimates and expanding enterprise relationships with brands such as Dior and Clinique. * AI and platform expansion: Shopify is supported by Vercel Shop's open-source Next.js integration, enabling merchants to build AI-focused storefronts and use shopping agents for product discovery and checkout. Shopify's AI tools and Platinum membership in the PyTorch Foundation reinforce its strategy to improve merchant productivity. * Institutional support: Carnegie Investment Counsel increased its Shopify position by 3.2% to 115,804 shares, a modest signal of continued institutional confidence. * Product development: Shopify POS reportedly added a Smart Grid feature that recommends and optimizes tiles using sales data and usage frequency, potentially improving merchant workflow and platform engagement. * Valuation and profit-taking risk: Shopify has rallied about 35% in a month and trades at a high earnings multiple. Commentary increasingly asks whether investors should take profits rather than add exposure, raising the likelihood of volatility or a pullback despite strong long-term growth expectations. Shopify stock performance. Shopify stock opened at $173.48 on Wednesday. The company has a debt-to-equity ratio of 0.01, a current ratio of 5.35 and a quick ratio of 5.35. The stock has a fifty day moving average price of $149.95 and a two-hundred day moving average price of $129.12. Shopify Inc. has a 52-week low of $94.00 and a 52-week high of $182.19. The firm has a market capitalization of $223.21 billion, a P/E ratio of 117.22, a P/E/G ratio of 3.53 and a beta of 2.62. Discover more Build a Website Launch a Store Shopify (NASDAQ:SHOP - Get Free Report) TSE: SHOP last issued its earnings results on Wednesday, August 5th. The software maker reported $0.42 EPS for the quarter, beating the consensus estimate of $0.40 by $0.02. Shopify had a net margin of 14.53% and a return on equity of 12.58%. The company had revenue of $3.58 billion for the quarter. During the same quarter in the prior year, the firm posted $0.69 EPS. The firm's revenue for the quarter was up 33.7% on a year-over-year basis. As a group, analysts anticipate that Shopify Inc. will post 1.46 EPS for the current fiscal year. Analyst upgrades and downgrades. SHOP has been the topic of several research analyst reports. Piper Sandler restated an "overweight" rating on shares of Shopify in a research note on Monday, October 5th. Cantor Fitzgerald raised their price target on shares of Shopify from $145.00 to $158.00 and gave the stock a "neutral" rating in a research report on Monday, October 12th. Robert W. Baird boosted their price objective on shares of Shopify from $160.00 to $190.00 and gave the stock an "outperform" rating in a report on Wednesday, October 14th. Zacks Research upgraded Shopify from a "hold" rating to a "strong-buy" rating in a research report on Friday, October 16th. Finally, Rosenblatt Securities initiated coverage on shares of Shopify in a research report on Thursday, August 20th. They issued a "buy" rating and a $175.00 price target for the company. Three equities research analysts have rated the stock with a Strong Buy rating, thirty-six have given a Buy rating and nine have given a Hold rating to the company. According to MarketBeat, Shopify has an average rating of "Moderate Buy" and an average target price of $175.89. Shopify profile. Shopify Inc is a commerce technology company that provides tools for businesses of various sizes to start, operate and grow online and in physical retail environments. Its platform supports online storefronts, product and inventory management, order processing, marketing, analytics and customer engagement. The company offers subscription-based plans and merchant solutions, including Shopify Payments, Shopify POS, Shopify Capital and tools for shipping, checkout and fulfillment. Shopify also supports sales through multiple channels, such as merchants' own websites, mobile devices, social media and third-party marketplaces. Shopify was founded in 2006 by Tobias Lütke, Daniel Weinand and Scott Lake after the founders developed an online store for snowboarding equipment. This instant news alert was generated by narrative science technology and financial data from MarketBeat in order to provide readers with the fastest reporting and unbiased coverage. Please send any questions or comments about this story to [email protected]. Before you consider Shopify, you'll want to hear this. MarketBeat keeps track of Wall Street's top-rated and best performing research analysts and the stocks they recommend to their clients on a daily basis. MarketBeat has identified the five stocks that top analysts are quietly whispering to their clients to buy now before the broader market catches on... and Shopify wasn't on the list. While Shopify currently has a Moderate Buy rating among analysts, top-rated analysts believe these five stocks are better buys. Tesla, Nvidia, and Google helped shape the last era of market growth, but the next wave could come from a new group of companies. Inside this report, you'll find 7 stocks that could play a major role in the next tech-driven market boom. Continue following MarketBeat

AI daily|october 18, 2026. 12stories5sections10sourcesAbout 4 min DeepSeek has launched version V4.1-Flash-1017, delivering substantial performance gains in agentic and coding benchmarks alongside faster execution and lower token usage. This brief is compiled automatically by AI and may contain errors. Check the linked sources. * Bottom line:DeepSeek has launched version V4.1-Flash-1017, delivering substantial performance gains in agentic and coding benchmarks alongside faster execution and lower token usage. * Benchmark Performance:Achieved significant improvements on complex agent evaluations, raising Terminal-Bench 4.0 scores from 31.2 to 42.3. * Pareto Efficiency:Delivers faster task completion with shorter outputs, reducing token consumption and task costs without raising API pricing. * Open-Weights Availability:Released under an MIT license with checkpoints available on Hugging Face and ModelScope for self-hosting. * Source: 在 X 上查看 @OpenRouter 的貼文 * Bottom line:JetBrains has open-sourced Mellum 2.1, a 12 billion parameter model optimized specifically for low-latency coding agent workflows. * Parameter Size:Features 12B parameters tailored for developer tooling and autonomous programming tasks. * Open-Source Release:Made openly available by JetBrains to support community-driven coding agent ecosystems. * Source:JetBrains AI Blog * Bottom line:Kyutai and academic partners have released REKI, a 2.4B VLA model designed to provide efficient memory and control for robotic manipulation. * Architecture:Built with a compact 2.4 billion parameter Vision-Language-Action architecture. * Pre-training Data:Pre-trained exclusively on public data and released on Hugging Face under an open license. * Source:MarkTechPost Coverage * Bottom line:Vercel has introduced session affinity in AI Gateway logs to automatically route sequential chat turns to the same provider for maximum prompt caching benefits. * Routing Logic:Directs consecutive turns to the provider that served the previous request, retaining cached prompt states. * Session Analytics:Aggregates requests into session views displaying total costs, models, provider pathways, and cache hit rates. * Source:Vercel Changelog * Bottom line:DeepSeek has opened its proprietary enterprise search and web fetching APIs to developers, enabling real-time grounding for agent harnesses. * Core Capabilities:Combines multi-language web search and URL text extraction to supply verified context to LLM workflows. * Pricing Structure:Priced per successful request starting November 1, with unsuccessful or timed-out queries incurring no charge. * Source:DeepSeek API Documentation * Bottom line:OpenCode disclosed a security breach affecting 1.4% of its Console users linked to a large-scale distillation attack, prompting urgent API key revocations. * Impact Scope:Impacted 1.4% of OpenCode Console users who had third-party provider keys (OpenAI, Anthropic, Google) stored in the platform. * Security Remediation:Affected users were notified via email and advised to immediately revoke compromised keys and update dependent systems. * Source: 在 X 上查看 @opencode 的貼文 * Bottom line:Meta updated its commercial terms to remove phrasing that legal experts previously interpreted as allowing publisher domain scraping for AI model training. * Policy Adjustment:Removed specific language suggesting commercial account data could be used to train Meta products and AI models. * Official Stance:Meta clarified that its web crawler practices remain unchanged and scraping terms apply strictly to ads and commercial products. * Source:The Verge Report * Bottom line:An internal Anthropic report showed that junior technical hiring dropped significantly as internal agent work hours reached six times human operating levels. * Hiring Changes:Junior technical employee representation fell from 21% to 14%, and junior hiring share decreased from 27% to 9%. * Agent Workload:Telemetry data indicated that interactive AI agent work hours scaled to six times human operator levels by August 2026. * Source:TechCrunch Coverage * Bottom line:Researchers demonstrated an 8B reasoning model trained to propose diverse and novel research ideas in a single generation by weighting conceptual distance. * Methodology:Trains a small reasoning model to generate sets of research ideas while penalizing similarity to previously generated concepts. * Evaluation:Outperformed larger frontier models like Claude Opus 4.8 and GPT-6 Astra on creative utility and diversity metrics. * Source:ArXiv Paper * Bottom line:Tencent researchers proposed a recursive self-improvement framework using verifier-guided fine-tuning and PPO to dramatically elevate terminal coding agents. * Performance Gains:Elevated the four-suite Terminal-Bench average from 20.68% to 50.58%, scoring 86.52% on Terminal-Bench 2.1. * Training Architecture:Alternated between fine-tuning on verified successful trajectories and running PPO with an inherited critic across five stages. * Source:ArXiv Paper * Bottom line:Anthropic's Claude successfully reverse-engineered and cracked a 25-year-old NIST elliptic curve cryptography seed originating from the NSA in under 30 minutes. * Background:Addressed the NIST standardized ECDSA curve seed from 2000 whose unspecified NSA origins long prompted backdoor speculation. * Resolution Speed:Solved the complex cryptographic mystery in less than 30 minutes using advanced chain-of-thought reasoning. * Source:The Decoder Coverage * Bottom line:The Claude Code team published an engineering breakdown detailing how they overhauled code reviews as AI agents generate roughly 90% of their codebase. * Efficiency Metrics:Despite merged pull requests doubling between June and September, code revert and incident rates dropped by over 40%. * Multi-Layered Checks:Employs a Swiss-cheese verification model featuring self-checks, independent reviewer agent pipelines, and automated CI tests. * Source:Claude Engineering Blog Thanks for reading to the end. Stay curious. See you tomorrow. Ad · Scribis Experience Scribis: ultimate AI audio & video workflow. Scribis is an all-in-one AI audio tool designed for creators, researchers, and professionals. It combines local privacy computation with cloud API integration, providing millisecond-level speech-to-text, speech synthesis, and dynamic timeline editing.