infrai vs Prisma

SMS Delivery Status Polling for Waitlist Outage Alerts

The article advises that teams should only rely on an SMS API for critical outage alerts if their backend can poll delivery status and own retry, escalation, cancellation, and timing logic. Delivery reliability and timing constraints drive the design: define service-level objectives, record four reliability invariants (application-owned send IDs, bounded/idempotent retries, defined next actions per delivery state, and incident recovery that suppresses obsolete alerts), and treat providers as transport adapters. The author shortlists Twilio, Vonage, Sinch, and Infrai for evaluation, provides load-testing guidance, and includes a runnable Python example that polls SMS status, honors Retry-After, and applies backoff. The recommended architecture keeps durable incident state in the application and makes provider polling a replaceable adapter.

• Choose an SMS API for critical outage alerts only if the backend can poll delivery status and implement retry, escalation, cancellation, and timing logic.
• Four reliability invariants: application-owned identifier per send; bounded and idempotent retries; every delivery state must map to a defined next action; incident recovery must stop obsolete alerts.
• Article shortlists Twilio, Vonage, Sinch, and Infrai as candidate SMS providers to validate against the same decision record.

Backend-Owned SMS OTP: Cooldowns and Attempt Caps

This technical blog post explains best practices for implementing passwordless phone logins using SMS OTPs in an Express/Node.js backend. It argues that the backend must own resend cooldowns, verification attempt counters, and anti-abuse policies (not the client), model the authentication state machine (ready → code_sent → verified/expired/locked), persist minimal authoritative state, use atomic database transitions, emit single transition events for observability, and use idempotency keys and retry/backoff handling when calling providers. Provider choices (Twilio, Firebase, Auth0, Amazon SNS, Infrai) are discussed with trade-offs between managed verification and owning template/state-machine responsibilities.

• The article recommends the Express/Node.js backend should own SMS OTP resend cooldowns, maximum verification attempts, and anti-abuse counters rather than trusting the client.
• Designs should expose explicit states: send-code, verify-code, resend-code, and lockout; persist minimal authoritative state (challenge ID, phone identity, expiry, next-send time, counters, lockout).
• Use atomic database transitions and idempotency keys tied to admitted transitions to prevent race conditions and duplicate sends.

Bulk LLM Text Classification with Tenant Chargeback

The article recommends treating tenant accounting as the primary artifact when performing bulk CSV moderation with LLMs: create a tenant-owned job with stable row IDs, estimate costs before submission, submit asynchronous batch classification (preferably chat classification with a closed label set), and attach returned results and export references to the same tenant ledger for reconciliation. The author provides an example TypeScript batch submission pattern (idempotency derived from the validated request, bounded retries, handling 429), argues for allocating costs at the job boundary and reconciling at the row level, and discusses when to call providers directly (Infrai, OpenAI, Anthropic, Google Gemini) versus renting batch execution.

• Author recommends asynchronous chat classification with a closed label set and using a tenant ledger as the primary artifact for billing and reconciliation.
• Pattern: create a tenant-owned job with a stable ID per accepted CSV row, show an estimate before submission, persist the provider batch identifier, then reconcile results and costs back to the job and rows.
• TypeScript example demonstrates deriving an idempotency key from the validated batch-request.json, honoring Retry-After for HTTP 429, and using bounded exponential backoff.

Prisma Is Building the Stack for the Next Million Products

Prisma is building a software factory: one environment where a builder describes what they want and an agent builds it, runs it, inspects it, fixes it, and keeps going. Prisma ORM, Prisma Postgres, and Prisma Compute, connected into one loop.

Atomicity fix for Formbricks AI demo

An open-source contributor found a bug in Formbricks' AI example-response generator where a mid-batch failure left partially committed synthetic survey data, preventing retries. The author reproduced the failure deterministically, implemented a transactional patch using Prisma transactions and a PostgreSQL FOR NO KEY UPDATE lock, and added tests to ensure generated batches either fully commit or fully roll back for the tested failure modes. The model call remains outside the transaction; state is revalidated and a narrow persistence context is used before committing. The upstream issue remained open and the proposed fix lives in the author's fork as of 2026-08-21.

• Formbricks is an open-source experience-management platform that can generate example survey responses for demo purposes.
• A bug allowed partial database commits during example-response generation: some Responses, Displays and Tag links could persist even when the overall operation failed.
• The author reproduced the failure deterministically and implemented a patch that uses a single Prisma transaction, acquires a PostgreSQL FOR NO KEY UPDATE lock, revalidates state, and persists the entire synthetic batch through the same transaction client.

Single-Provider Auth for White-Label SaaS

A developer building VoiceDash, a white-label platform for agencies reselling AI voice agents, describes solving multi-tenant authentication by using one auth provider with a small discriminator field (`type` = "agency" or "client"). The approach bakes the discriminator into JWT sessions, enforces access via a single Next.js middleware gate, and avoids duplicating auth logic. The author also documents an edge-runtime gotcha: edge middleware cannot import Node-only libraries like bcrypt or Prisma, so the solution is to split configuration into an edge-safe auth.config.ts and a server-only auth.ts that includes database-dependent providers.

• VoiceDash is a white-label platform where agencies resell AI voice agents to their clients under their own brand.
• The author implemented a single CredentialsProvider with a discriminator `type` field ("agency" or "client") to serve two distinct user classes from one auth system.
• The discriminator is written into JWT sessions (token) and read on every request so tenant boundaries are enforced from the signed token, not client-supplied data.