Developer releases tiny framework-agnostic permission-checking library for mismatched backend strings

·1 views

A frontend developer built and open-sourced a lightweight JavaScript library called permission-access after repeatedly struggling with backend permission strings that didn't match what the UI expected on an internal admin dashboard. The core problem was that backend endpoints used names like Orders.GetAll_GET instead of semantic labels like orders.read, forcing developers to hardcode brittle strings across dozens of UI components. The library introduces an optional actionMap that lets the UI ask semantic questions about permissions without depending on backend naming conventions. It has zero runtime dependencies, works independently of any framework, and includes optional React bindings via a PermissionsProvider and usePermissions hook. The project is at v0.1.x, has not been widely battle-tested, and is available on npm and GitHub.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Open-Source Telemetry API Targets eVTOL Prototyping Data Chaos

A developer has released aero-telemetry v0.1.0, a lightweight open-source API built with FastAPI and Pydantic to standardize flight test data ingestion for eVTOL and drone prototyping. The tool allows teams to ingest sensor data — including battery state, GPS, IMU, and motor RPM — via HTTP, with built-in validation that catches out-of-range readings before they corrupt datasets. It uses SQLite by default with SQLAlchemy 2.0 async support, making it runnable on a laptop without any configuration, and includes 26 pytest tests covering CRUD operations and edge cases. The project is licensed under Apache-2.0 and targets eVTOL startups, drone fleet operators, and graduate researchers who need structured flight data without enterprise-grade overhead. Planned features include PostgreSQL support, WebSocket streaming for real-time telemetry, and Grafana dashboard integration.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Setup Automation Confirms Steps Ran, Not That a Repo Is Actually Ready

Developer tooling platform Ota argues that successfully running a setup command like 'npm install' does not mean a repository is in a usable or trusted state. The company distinguishes between setup automation, which confirms a sequence of steps completed, and readiness verification, which confirms the environment is correctly configured and safe to execute. Without an explicit verification layer, two developers running identical setup commands can end up in different functional states, leading to lost debugging time. The gap becomes more critical for AI agents, which cannot rely on intuition to detect misconfigured runtimes, missing services, or unresolved environment variables. Ota proposes that repos adopt a machine-readable execution contract separating the phases of preparation, verification, and readiness before any task execution begins.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Developer shares four key failure modes found when running AI sub-agent teams

A software developer running a multi-agent AI system has documented the structural failure patterns that emerged in practice, moving beyond architecture theory. Key issues included agents falsely reporting missing files due to bounded search tools, unrestricted file writes to unintended paths, summarizer failures flooding the context window with raw data, and the human operator skipping safety steps under pressure. Fixes implemented include rules preventing agents from declaring absence without multiple search methods, explicit write-path restrictions per task, hard failure flags to abort rather than dump unsummarized content, and mandatory human approval before any critical action. The developer concludes that agentic systems are only as safe as the human still actively supervising them, and that structural constraints consistently outperform behavioral or prompt-based rules.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Runscribe turns terminal sessions into replayable runbooks with no AI or internet

A developer has released Runscribe, a free open-source command-line tool that converts recorded terminal sessions into structured, replayable runbooks in Markdown or HTML format. The tool operates entirely offline with no network calls, no account required, and no telemetry, addressing privacy concerns around sharing internal commands with AI services. Runscribe automatically redacts secrets and credentials from the output using deterministic regex rules rather than machine learning. Users can record a session, build a clean runbook with secrets scrubbed, and later replay it step by step on any machine, with placeholder prompts for environment-specific values. The tool is available via pip on PyPI and also ships as a standalone binary for Linux, macOS, and Windows.

0 comments Read more at DEV Community