SShortSingh.

Programming

0
ProgrammingHacker News ·

Cekura, YC F24 Startup, Hiring Forward Deployed Engineer in US

Cekura, an AI startup backed by Y Combinator's F24 batch, has posted an open position for a Forward Deployed Engineer based in the United States. The job listing was shared on Y Combinator's official company jobs board. The role appears to be focused on hands-on technical deployment work, a common function at early-stage AI companies. The posting attracted no comments or upvotes on Hacker News at the time of publication.

0
ProgrammingDEV Community ·

SoundScript Library Lets .NET Apps Generate Audio Dynamically from App State

A .NET library called SoundScript, targeting .NET 10, enables developers to generate audio procedurally from application state rather than relying on static WAV file libraries. Instead of maintaining separate audio files for every event variation, developers define musical rules — including tempo, dynamics, and motifs — that map directly to runtime conditions. For example, a warning sound's intensity can automatically scale with a severity level, or a game's background tempo can increase as a player advances through levels. The library compiles a simple text-based script describing musical intent and renders it into a WAV file on the fly. This approach reduces asset management overhead in games and interactive applications where sound needs to vary based on changing runtime data.

0
ProgrammingDEV Community ·

Silent JS Bugs Skewed Months of Analytics on a Live Product Search Site

A developer running OneFindMe, a multilingual AliExpress product search engine, discovered a cluster of long-standing JavaScript bugs only after installing a session-recording tool — despite all automated checks showing green. A flawed HTML-entity escaping method in inline click handlers caused syntax errors for product titles containing apostrophes, silently breaking favourite, share, and analytics tracking on roughly a third of every results page. Because the underlying product links remained intact, no sales were directly lost, but click-through rate data collected over months was systematically undercounted, corrupting product decisions made on that data. A second bug referenced a renamed CSS class that no longer existed, rendering two buttons completely inert, a fact only made visible when session recordings showed a user clicking the same dead button five times in 26 seconds before abandoning the session. The incident highlights that passing automated checks does not confirm a working user experience, and that client-side errors which leave no server-side trace can only be reliably caught through direct page observation.

0
ProgrammingDEV Community ·

SoundScript Library Lets .NET Apps Generate Audio from JSON Data

A .NET package called SoundScript enables developers to convert structured JSON data into WAV or MIDI audio files without building a dedicated audio engine. The library, version 13.0.0 targeting .NET 10, works by letting the application map its own JSON schema to SoundScript source code, which then handles compilation and rendering. Developers can link business logic variables — such as alert severity or application state — to musical parameters like dynamics and note sequences. The tool maintains a clear separation between application data and audio rendering, keeping business rules within the application layer. SoundScript is available via NuGet and is positioned for use cases where audio output needs to respond dynamically to changing application state.

0
ProgrammingDEV Community ·

How to Recover Vanished Chat History in Google Antigravity IDE

Developers using Google Antigravity IDE have reported chat histories disappearing from the sidebar after updates, reinstalls, cache clears, or periods of inactivity. The data is not actually deleted but enters a dormant state on disk, as the IDE avoids loading hundreds of conversation trajectories into frontend memory simultaneously. Conversations are stored in SQLite database files under ~/.gemini/antigravity-ide/conversations/ and can be reactivated by triggering a sync event through the IDE's internal Language Server daemon. One discovered workaround involves submitting a comment via an open artifact's Review menu, which wakes the dormant conversation and restores it to the sidebar instantly. For cases without an open artifact, the article outlines two open-source tools — a VS Code extension and a standalone Python script — designed to restore conversations on demand.

0
ProgrammingDEV Community ·

SoundScript Converts Text to MIDI Music Using Deterministic Rules, No AI Needed

SoundScript is a .NET library that transforms plain text into MIDI music files through a fixed, rule-based pipeline rather than generative AI prompts. The tool breaks input text into syllables and phonemes, maps them to musical gestures, and produces a complete musical program that always yields the same output for the same input. This deterministic approach contrasts with AI music generators, which can produce different results across runs due to probabilistic interpretation. SoundScript 13 targets .NET 10 and requires no hosted AI service, random seeds, or external prompts. The library is aimed at use cases where reproducibility matters, such as automated testing, CI/CD pipelines, procedural content generation, and research.

0
ProgrammingDEV Community ·

SoundScript Lets .NET Developers Generate Reproducible Audio Test Fixtures from Code

Most development teams generate JSON, database records, and API payloads as test fixtures, but audio files are typically stored as opaque binary assets with no clear history or intent. SoundScript, a .NET library now on version 13 targeting .NET 10, lets developers define audio content in a readable text format that compiles deterministically into WAV and MIDI files. Because the same source always produces identical output, generated audio can be hashed and validated in automated regression tests just like any other build artifact. This approach makes audio changes visible and reviewable in pull requests, since a developer can read the tempo, instrument, and note definitions rather than simply seeing that a binary file changed. The pattern mirrors workflows already common in software development, such as generating API clients from schemas or documents from templates.

0
ProgrammingDEV Community ·

SoundScript Library Lets C# Developers Generate MIDI and WAV from One Definition

SoundScript is a C# library targeting .NET 10 that allows developers to generate both MIDI and WAV audio files from a single high-level musical description. Rather than manually constructing MIDI events, timestamps, and velocities, developers write a compact script defining tempo, instruments, notes, and dynamics. A single call to SoundScriptEngine.Compile() produces an object that can render both file formats independently. The library is positioned as a higher-level abstraction above traditional MIDI libraries like DryWetMIDI, which remain better suited for DAWs, hardware integration, or direct MIDI manipulation. For larger projects, SoundScript also supports loading musical definitions from external .ss files, keeping audio logic separate from application code.

0
ProgrammingDEV Community ·

Beyond Prompt Injection: 4 OWASP Agent Security Risks Most Teams Overlook

While prompt injection dominates AI security discussions, the OWASP Top 10 for LLM Applications 2025 lists nine additional vulnerabilities that pose serious risks to AI agent deployments. Among the most critical is Excessive Agency, where agents are granted unnecessary capabilities, overly broad permissions, or allowed to take high-impact actions without human verification — often by default rather than deliberate design. Improper Output Handling is another underappreciated risk, occurring when an agent's text output is passed directly into queries, shell commands, or config files without validation, requiring no external attacker to cause harm. Security experts argue these architecture and permission-level flaws are the ones that actually cost businesses money, since they cannot be solved simply by upgrading to a better AI model. Organizations are advised to scope agent permissions tightly to each specific role and enforce authorization checks in downstream systems rather than relying on the language model itself as an access control layer.

0
ProgrammingDEV Community ·

Amazon ECS Express Mode Emerges as Alternative After AWS App Runner Deprecation

AWS has deprecated App Runner, blocking new service creation and pushing developers toward alternatives like Amazon ECS Express Mode. A developer on DEV Community has published a hands-on guide exploring ECS Express Mode as a simpler entry point into Amazon ECS, which traditionally requires extensive manual setup. The tutorial walks through building a .NET 10 Web API, containerising it, and publishing the image to GitHub Container Registry via GitHub Actions CI/CD. Infrastructure provisioning is handled using Terraform with the AWS provider targeting the us-east-1 region. The guide is aimed at AWS beginners looking for a manageable way to deploy containerised applications following App Runner's end of support.

0
ProgrammingDEV Community ·

Developer Finds Wall-Clock Bug in Python Poller After 48-Hour Production Incident

A software developer spent 48 hours debugging a Python polling service that passed health checks locally but failed in production after deployment. The root cause was a deadline anchored to time.time(), a wall clock susceptible to NTP corrections and hypervisor pauses, rather than a stable monotonic clock. The developer refactored the wait_until helper to accept an injectable Clock abstraction, separating wall time from monotonic time. A FakeClock test fixture was built to simulate clock jumps deterministically inside pytest, eliminating the need to wait for real NTP events to reproduce the bug. The incident highlights why timeout logic should rely on monotonic clocks and be tested with controllable fake clocks rather than real system time.

0
ProgrammingDEV Community ·

Developer hits Bybit's 20 partial TP/SL order cap while automating TradingView signals

A developer building a TradingView-to-Bybit automation system discovered that Bybit's Partial TP/SL mode, designed to attach stop-loss and take-profit orders to portions of a position, caps out at 20 such orders per position. The system was engineered so that each individual TradingView entry signal received its own independent TP/SL protection, preserving separate risk logic for every setup. This approach worked correctly until the 21st entry triggered a Bybit API error code 110061, flatly refusing any further partial TP/SL orders. Switching to a single Full TP/SL on the entire position would simplify execution but would collapse all individual entry risk levels into one average-price-based exit, defeating the original design goal. The developer concluded that neither available mode fully satisfies the requirement once the number of concurrent setups exceeds Bybit's 20-order limit.

0
ProgrammingDEV Community ·

Five PATH Myths That Break CI Agents and How to Fix Them

CI and automation agents frequently fail to inherit the same PATH environment as a developer's local machine, causing tool resolution errors on scratch or remote hosts. Common misconceptions include trusting the output of 'which', assuming version manager hooks like nvm are active, and believing a successful install persists across separate shell sessions. Each agent command may launch a cold shell, meaning PATH must be explicitly set and verified at the start of every step rather than assumed from prior context. Bash also caches binary locations in a hash table, which can cause stale lookups even after PATH is updated, making 'hash -r' a necessary step after any PATH mutation. The recommended approach involves printing PATH explicitly, using 'command -v' and 'type -a' for verification, exporting install directories in the same session, and confirming binary identity via checksum rather than relying on version output alone.

0
ProgrammingDEV Community ·

Structured AI Model Jev Matches Claude on Bounded Decision Task With Perfect Accuracy

A developer tested TypeSafe's Jev model against Claude Sonnet on a real judging workflow used for the 2026 Arbitrum Open House London Online Buildathon. The test focused on a single bounded decision gate — classifying project submissions as satisfied, not_satisfied, or insufficient_evidence — rather than open-ended writing or reasoning tasks. Both models were given identical JSON evidence packets and a four-step decision procedure, with each configuration run three times across 102 archived submissions, producing 306 decisions per variant. Jev, which TypeSafe positions as a structured decision model with primitives like Choice and Score rather than free-form generation, achieved 100% accuracy with zero false passes and full consistency across all runs. The author notes the test was deliberately narrow, designed not to compare general capabilities but to evaluate whether frontier LLMs are overkill for tightly scoped, policy-bound classification tasks.

0
ProgrammingDEV Community ·

How to Systematically Debug .NET MAUI Build Failures on macOS

A developer documenting their .NET MAUI setup on macOS found that build failures often stem not from missing installations but from misconfigured tool paths and version mismatches. A key issue encountered was Xcode being installed yet inactive, because the developer directory was pointing to Apple's Command Line Tools rather than the full Xcode application. The troubleshooting approach recommended treating the development environment as a dependency chain — from the .NET SDK down to the simulator or physical device — and isolating the failing layer before making any changes. Android builds presented separate challenges, including JDK discovery failures even when the JDK was present on the system. The core lesson is that effective debugging requires verifying what build tools can actually see and use, not just what is installed on the machine.

0
ProgrammingDEV Community ·

Django Logging Series Part 2: Python Logging Fundamentals Explained

A DEV Community tutorial series on Django logging has published its second installment, focusing on the fundamentals of Python's built-in logging system. The article explains how Python's logging module uses a hierarchical, object-oriented pipeline anchored by a root logger at the top of the tree. It covers the five standard log levels and their numeric severity values, clarifying how the configured threshold determines which messages get processed and output. Real-world log samples from both a Python service and a Django framework are used to illustrate key components such as timestamps, log levels, logger names, and event descriptions. The guide aims to help developers understand the foundational concepts needed before configuring structured logging in production Django applications.

0
ProgrammingDEV Community ·

Backtracking Explained: The Algorithm That Explores and Undoes Wrong Choices

Backtracking is a structured algorithmic technique used to solve problems where multiple choices must be explored, such as Sudoku, maze solving, and generating permutations. The core idea involves making a choice, exploring it recursively, and undoing it if it proves invalid before trying the next option. This make-explore-undo cycle navigates a decision tree, pruning paths that cannot lead to a valid solution rather than restarting from scratch. A classic example is generating all permutations of an array, where elements are added one at a time and removed upon backtracking. The pattern is widely applicable to constraint satisfaction and combinatorial problems in computer science.

0
ProgrammingDEV Community ·

New tool 'skilldiff' detects behavioral regressions in AI coding agent skill files

A developer has released an open-source tool called skilldiff, designed to catch unintended behavioral changes when editing SKILL.md instruction files used by AI coding agents like Claude Code, Cursor, and Codex. The tool runs a skill file in a real agent environment against a fixture repository, comparing outputs from the old and new versions of the file across a pull request. Unlike standard text diffs, skilldiff tracks what the agent actually does — including files modified, commands executed, and tools invoked — rather than just what text changed. A built-in assertion system flags forbidden actions, such as an agent unexpectedly creating or modifying files it was not supposed to touch. In CI mode, the tool replays recorded traces deterministically without requiring an API key, and can post behavior reports directly to pull requests to block regressions from merging.

0
ProgrammingDEV Community ·

How OAuth and MCP Spec Turn a 401 Into a Full Sign-In Flow

Developers building MCP servers discovered that certain clients like the Claude desktop app refused to connect when servers returned a 401 without proper OAuth metadata, causing failures that initially looked like bugs. Unlike developer tools such as VS Code and MCP Inspector, which allow custom headers for key-based auth, end-user MCP clients strictly follow the OAuth-based authorization spec and offer no manual header workaround. When a spec-compliant client receives a 401, it expects Protected Resource Metadata to initiate an OAuth flow, and without it, registration fails with a 404 error. Microsoft's Azure Functions now simplifies this via a dedicated 'Turn on MCP authentication' button in the portal, which configures Entra ID, App Service authentication, and disables key-based access in one step. The manual setup involves switching to anonymous webhook authorization, enabling Easy Auth with Microsoft as the identity provider, and publishing Protected Resource Metadata so compliant clients can discover the authorization server.

0
ProgrammingDEV Community ·

Six Bash Readline Shortcuts to Speed Up Command-Line Navigation

Bash's Readline library includes several keyboard shortcuts that go beyond basic TAB completion to make terminal use faster and more flexible. Alt-g triggers glob-based completion, allowing users to match filenames by a middle segment rather than just a prefix, while Ctrl-x * expands a glob pattern directly into all matching filenames. Alt-. inserts the last argument from the previous command, saving retyping of long paths or filenames across consecutive commands. Ctrl-r enables incremental reverse search through command history, useful for quickly recalling complex or lengthy commands. For editing particularly long commands, Ctrl-x Ctrl-e opens the current input in the user's configured text editor, returning the edited command to the shell upon saving.

← NewerPage 1150 of 3222Older →