Dev.to CLI Tool devpub Gains Image Upload Feature via Community Contributor

·2 views

An open-source command-line tool called devpub, built to replace the Dev.to web editor, received its first community pull request three weeks after launch. Developer Harish independently forked the repository, tackled a long-pending issue, and delivered a complete image upload feature with tests and edge-case handling. The new devpub upload command lets users upload images directly from the terminal, bypassing the multi-step browser workflow previously required. Because the official Forem API lacks an image upload endpoint, Harish reverse-engineered the web editor's upload mechanism, which relies on browser session cookies and a CSRF token rather than an API key. The feature is available in devpub version 0.3.0 and includes a --markdown flag that outputs ready-to-paste image syntax for local article drafts.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Developer builds 129 browser-based tools with no backend infrastructure

A developer has launched Toolsholic, a collection of 129 web tools that operate entirely within the browser without any backend server. The site is hosted as a static export on a content delivery network, with all processing handled client-side. It uses libraries such as pdf-lib and pdf.js for document handling, the Canvas and File APIs for image tasks, and Web Workers for performance-heavy operations. The tools remain fully functional even when the device is offline, confirming that no server communication is required.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Architectural Firewall, Not System Prompts, Is the Real Fix for AI Prompt Injection

Developers at ThumbGate argue that relying on system prompts to prevent prompt injection in AI agents is fundamentally flawed, since language models cannot reliably distinguish instructions from data at the token level. The team has open-sourced an architectural approach that treats the LLM itself as untrusted and places a deterministic, code-based firewall between the model and any real-world tool execution. All external inputs are tagged as tainted and cannot alter tool invocation parameters, while every proposed action — such as sending an email or running a command — is intercepted and validated against a cryptographic allowlist in under one millisecond. The system has been deployed in production on a South Florida real estate deal desk, where thousands of public records are processed daily with no reported injection breaches. The developers say the solution can be run locally via a simple command-line tool, and urge builders to fix agent architecture rather than extending system prompts.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Why Background Jobs Silently Fail and How to Build Them Reliably

Backend engineer Maneshwar, creator of the LiveReview code-review tool, explains why offloading tasks like welcome emails to background job queues is essential for fast, resilient APIs. Running email sends inline during a signup request ties response times and uptime directly to third-party mail providers, which can be slow or unavailable. The recommended fix is to save the user, return a response immediately, and push a job to a queue such as SQS or RabbitMQ for a separate worker pool to process. However, this introduces a 'dual write' problem: if the application crashes after writing to the database but before enqueuing the job, the task disappears silently with no errors or alerts raised. This silent failure mode, where both systems appear healthy yet work is lost, is described as more dangerous than an outright crash because it goes undetected.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

How Drizzle ORM and TypeScript Can Optimize Backend Query Performance

Engineers at CSI TECH Informática have outlined best practices for building high-performance backend architectures using Drizzle ORM, TypeScript, and PostgreSQL. The article addresses a common bottleneck in enterprise applications: performance degradation caused by heavy ORMs that generate unnecessary queries, known as the N+1 problem. Drizzle ORM is presented as a lean, SQL-oriented alternative that gives developers direct control over query execution while preserving static type safety. The piece includes a practical TypeScript code example demonstrating an optimized join query between users and orders tables. The approach is positioned as suitable for microservices and corporate platforms requiring low latency, strict data integrity, and horizontal scalability.

0 comments Read more at DEV Community