Cordis: The TypeScript Meta-Framework Enabling Zero-Downtime Plugin Hot-Swapping

·1 views

Cordis is an open-source, MIT-licensed TypeScript meta-framework originally built by developer Shigma and the Koishi chatbot team between 2019 and 2022 to solve runtime lifecycle problems in long-running applications. Unlike conventional backend frameworks such as Express or NestJS, which require a full process restart to update or swap modules, Cordis allows plugins to be loaded, reconfigured, and unloaded dynamically without memory leaks or downtime. The framework achieves this through microkernel primitives, reverse cleanup stacks, and strict mathematical reversibility that ensure clean teardowns after each operation. DeepSeek Harness, an autonomous AI coding agent, adopted Cordis as its execution kernel because agents running unattended over many turns tend to accumulate leaked event listeners, orphaned processes, and memory bloat in traditional monolithic architectures. With over five years of battle-testing inside the Koishi ecosystem, Cordis now underpins DeepSeek Harness's ability to run reliably on resource-constrained consumer GPUs.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Nile uses session variables to isolate Postgres tenants in multi-tenant B2B apps

Nile is a Postgres-based platform designed for multi-tenant B2B applications, allowing developers to isolate tenant data within a single database using a tenant_id column and a session variable rather than separate databases per customer. A developer testing the free tier found that setting the session variable correctly filters rows by tenant, and cross-tenant writes are actively blocked with an explicit error. However, connections without the session variable set can read rows across all tenants by design, a deliberate choice to support admin and migration workflows. This means the responsibility for setting tenant context on every request falls on the application layer, which could be a risk in pooled-connection environments if not handled carefully. Nile raised an $11.6 million seed round led by Benchmark in January 2024 and was co-founded by Sriram Subramanian and Gwen Shapira.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

How InnoDB Uses a Hybrid MVCC Approach Across MySQL Isolation Levels

MySQL's default storage engine, InnoDB, uses a hybrid approach to concurrency control — applying MVCC only to read operations while relying entirely on locking for updates, inserts, and deletes. Unlike PostgreSQL, which stores full row versions in the same heap structure, InnoDB stores only the delta (the difference between versions) in a separate structure called the undo log. When a transaction reads a row, InnoDB builds a snapshot of in-flight transactions at the first SQL statement and keeps it frozen for the transaction's lifetime to determine row visibility. For write operations, InnoDB acquires the appropriate lock and fetches the latest row version directly, bypassing the version chain altogether. Repeatable Read is InnoDB's default isolation level and serves as the foundation from which other isolation levels differ only in minor ways.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

A Practical Guide to Mastering No-Code Web Development in 2026

No-code development has evolved far beyond simple landing pages, now powering production apps, MVPs, and full businesses across tools like Webflow, Bubble, and Zapier. A newly published 2026 guide outlines a structured learning path for both developers and non-developers looking to build real products without writing traditional code. The guide emphasizes starting with low-stakes projects to understand how tools handle data, logic, and UI before tackling serious builds. It identifies poor data modeling — not design — as the most common reason no-code projects fail, and advises learning conditional logic as the core skill. The guide also warns against common mistakes such as choosing the wrong category of tool, ignoring mobile optimization, and trying to force a single platform to handle every function.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

How to Shield Node.js AI Agents from Supply Chain Attacks Using Sandboxing

AI agents capable of executing code or installing packages are vulnerable to supply chain attacks, where compromised dependencies can exfiltrate data or escalate privileges without any malicious prompt from the user. The 2019 RubyGems 'strong_password' incident demonstrated how pre-install scripts can silently steal environment variables and sensitive files — a risk that directly applies to autonomous agents. A developer building AI systems such as FarahGPT and NexusOS spent weeks designing a Node.js-based mitigation strategy called the Execution Context Guardian. The approach uses Node.js's built-in vm module to run agent-initiated code inside a strictly isolated context, whitelisting only approved globals and blocking direct access to dangerous functions like child_process.exec. The goal is to prevent agents from inadvertently triggering malicious package scripts or making unauthorized network calls, even when acting with seemingly helpful intent.

0 comments Read more at DEV Community