SShortSingh.

Programming

0
ProgrammingDEV Community ·

House Pot: Amma's kitchen in Dhaka — approve first, then listen

Submission for Hacktoberfest Weekend: Build for a Friend — #hf26challenge House Pot is a small kitchen app for Amma in Dhaka: one recipe from tonight’s pantry, allergies checked in code, voice only after she approves. Weeknight dinner in our flat is not “pick a trending recipe.” It is what came back from the market, who is eating, and who cannot eat peanuts or shellfish. Recipe apps and generic AI chefs assume you will shop for their list, trust a prompt for safety, and read long steps while the rice is on the stove. That fails when: the pantry is fixed for tonight (dal, rice, greens, whatever

0
ProgrammingDEV Community ·

The Lord of the Queries: Defeating the N+1 Dragon

The Quest Begins (The "Why") Honestly, I was just trying to ship a feature that showed a user’s recent activity feed. The UI looked slick, the backend was a simple Rails API, and I felt like I’d nailed it. Then I opened the logs and saw hundreds of SQL statements scrolling by for a single page load. My heart sank – it was like watching the Death Star trench run and realizing every TIE fighter was a separate query. That moment was my “aha!” – the classic N+1 query problem rearing its ugly head.

0
ProgrammingDEV Community ·

Modeling Cross-Chain Completion States

Ethereum finality takes about 15 minutes under normal conditions, but a finalized source transaction still does not prove that the destination asset arrived. If you are wiring cross-chain execution into an application, your completion state must reflect the destination chain’s evidence, not just the wallet’s successful source receipt. A user who deposits on Ethereum and expects an asset on Optimism needs a clear answer when the first transaction is confirmed but the second is still pending. A transfer is complete when the expected destination-side effect has occurred and meets your application

0
ProgrammingDEV Community ·

MCP stdio vs Remote Transports: Run It Locally or Host It?

One of the most useful, and most confusing, properties of the Model Context Protocol is that the server code does not care how a client connects to it. A server exposes tools, resources, and prompts; the transport is a thin adapter underneath. Teams get stuck because the two transports in common use have almost nothing in common operationally: stdio is a child process with inherited credentials, Streamable HTTP is a hosted service with OAuth and uptime expectations. This article is the decision guide I wish existed before we shipped internal MCP servers both ways. Transport Connection State Ty

0
ProgrammingDEV Community ·

A success message does not prove your form saved anything

A form can show a cheerful confirmation while the server rejects the request. If you're debugging that behaviour, start with a small contract: the interface should show success only after the request returns an accepted result. Here is an illustrative handler with the state transitions separated from the request. send and setState are injected so the behaviour can be checked without a live server: async function saveEntry(payload, send, setState) { setState({ status: "saving" }); try { const response = await send(payload); if (!response.ok) throw new Error("Request was rejected"); setState({ s

0
ProgrammingDEV Community ·

Intergrating Payments to your SaaS from Cameroon shouldn’t be this much of a Hassle

In my last post about renaming Trivue to Tagviu, I mentioned having a rough time integrating international payments as a developer based in Cameroon. Let's talk about it. I tried several popular payment providers and Merchant of Records: Polar, Stripe, Dodo Payments, Lemon Squeezy, Paystack, Flutterwave, and a few others. The problem was: A lot of them don't support businesses in many African countries. Some of the providers that do support a handful of African countries, like Paystack and Flutterwave, currently don't let businesses registered in Cameroon get verified.

0
ProgrammingDEV Community ·

I built an L1 ticket deflector that knows when to stop: LangGraph + human-in-the-loop

I built an L1 ticket deflector that knows when to stop: LangGraph + human-in-the-loop The same tickets arrive at every IT service desk: password resets, VPN that won't connect, "how do I install 7-Zip?", a printer that's offline again. A widely cited industry range puts routine requests at 50–70% of L1 volume — work a script could handle, except nobody trusts a script with the tickets that actually matter. Building an agent that answers everything is easy. Building one that knows when to hand a ticket to a human is not. I built the second kind and open-sourced it.

0
ProgrammingDEV Community ·

Flock Verdict: Why IT Leaders Must Stop Mass Employee Surveillance

Flock Under Fire: How the Latest Court Ruling Turns Employee‑Monitoring Into Mass Surveillance – What IT Leaders Must Do Now Introduction A U.S. federal judge just declared that the popular employee‑monitoring platform Flock is “indiscriminate mass surveillance.” The ruling has sent ripples through corporate IT, privacy‑rights groups, and regulators on both sides of the Atlantic. In the days after the decision, Google Trends showed a 250 % surge in searches for “Flock privacy lawsuit,” “detect monitoring software,” and “GDPR employee tracking.” If you’re an IT manager, compliance officer, lega

0
ProgrammingDEV Community ·

JLScript: Guia Completo da Sintaxe, do Básico ao Avançado

🧛 JLScript — Do Básico ao Avançado Aprenda JLScript do primeiro mostrar() até APIs, banco de dados, dispositivos e interfaces. JLScript, também chamado de JLS, é uma linguagem de programação criada com o objetivo de possuir uma sintaxe simples, legível e agradável para quem está começando, sem impedir a criação de projetos maiores. Os arquivos da linguagem utilizam a extensão: .jls Neste guia vamos começar absolutamente do zero. No final, você já terá visto: variáveis; valores; operadores; condições; loops; funções; listas; objetos; tratamento de erros; módulos; aliases; tempo; APIs; banco de

0
ProgrammingDEV Community ·

Pushing Container Images to Google Cloud Artifact Registry (Step-by-Step)

When running Kubernetes locally with Docker Desktop, you have a handy superpower: your local Kubernetes cluster shares your computer's local Docker daemon. Any image you build via docker build is immediately available to your local pods without needing to push it to the internet. However, the moment you decide to deploy to a managed cloud cluster like Google Kubernetes Engine (GKE), that magic ends. GKE nodes run in Google Cloud's data centers and have no access to your laptop's disk. They need a secure, centralized container registry from which to pull your container images.

0
ProgrammingDEV Community ·

Implementing Public Watermark Delivery — Keep Original Promo Frames Private

Keep one immutable master private, generate a versioned watermarked derivative once, and let only that derivative cross the public cache boundary. For an edtech creator portfolio that turns prompts into short promo videos, the poster image shown in galleries is disposable and cacheable while the clean frame used to regenerate or re-edit the video is neither. The decision rule is blunt: if changing an object would require creative work again, it is a master; if it can be reproduced from a master plus a recipe, it is a derivative. TL;DR: Put masters and derivatives in separate storage namespaces

0
ProgrammingDEV Community ·

Dot-Form Header Aliases: How Traefik ForwardAuth Identity Spoofing Reached Backends Before 2.11.56

Dot-Form Header Aliases: How Traefik ForwardAuth Identity Spoofing Reached Backends Before 2.11.56 Why this matters to anyone running a proxy in front of an application A common architecture puts a reverse proxy in front of an application and lets the proxy decide who the caller is. The proxy validates a session or a JWT, then writes an identity header such as X-Authenticated-User into the upstream request. The backend trusts that header because it cannot see the proxy's decision-making. CVE-2026-88879 breaks that trust contract in Traefik. The flaw is not a memory-safety bug, and it does not

0
ProgrammingDEV Community ·

Flock bajo fuego: ¿Tu empresa está lista para la nueva normativa de vigilancia?

Flock bajo fuego: el fallo judicial que obliga a revisar tu política de vigilancia digital Introducción Un tribunal federal de EE. UU. ha calificado a Flock como “vigilancia masiva indiscriminada”, y la noticia está generando un boom de búsquedas sobre detección de software de monitoreo y cumplimiento normativo. Si tu empresa usa herramientas de control de empleados o simplemente quieres asegurarte de que no haya sorpresas legales, sigue leyendo: aquí tienes todo lo que necesitas saber, paso a paso, con scripts listos para ejecutar y listas de verificación prácticas. Flock es una plataforma de

0
ProgrammingDEV Community ·

Installing NGINX Ingress Controller in Docker Desktop: A Step-by-Step Guide

In our previous post, we deployed three microservices (add-service, multiply-service, and docs-service) and exposed them using Kubernetes ClusterIP services. While everything was running smoothly, there was one major limitation: ClusterIP services are internal to the cluster. To access them, we had to rely on kubectl port-forward. In a real-world scenario, you want a single entry point (usually port 80 or 443) that acts as an intelligent reverse proxy, routing: Requests for / to the docs-service (Swagger/OpenAPI documentation) Requests for /api/add to the add-service Requests for /api/multiply

0
ProgrammingDEV Community ·

Vendor AI Compliance: A Procurement Checklist

Originally published at https://charz.ai/blog/vendor-ai-compliance-procurement-checklist by Char-Z AI. Buy AI the Way You Buy Software, Then Add the AI Layer Procurement is where third-party AI risk is either controlled or created. A standard software RFI covers security and pricing, but AI tools add dimensions — model behavior, training data, autonomy, and governance — that a traditional RFP misses. This checklist turns the evaluation workflow from our third-party AI risk guide into a concrete, repeatable artifact. Use it in two passes.

0
ProgrammingDEV Community ·

Browser Game Design: Local Saves, Clear Rules, and Less Setup

A browser game gives developers a focused design problem: help someone understand an interaction, make a decision and see the result. Features that do not support that sequence deserve a closer look. I am involved with Kral.Games, a browser-gaming project whose collection includes puzzles, creative activities and games built around programming concepts. Two examples, Robot Routes and Circuit Garden, provide useful starting points for discussing interaction design, state and testable rules. This article looks at those product-level choices rather than claiming to document the platform’s complet

0
ProgrammingDEV Community ·

Live chart updates without re-rendering the DOM — st-core + one CSS variable write

When data changes every second, the expensive path is rebuilding markup or redrawing a canvas. With st-core@v2, the chart is already pure CSS (clip-path fill/line driven by --st-p1 … --st-pN). Live updates only need JavaScript to rewrite those variables on the chart layers. Template: templates/live-shift JS: dashboard.js Approach Cost on each tick Rebuild table / SVG nodes DOM create/destroy, layout Full chart library redraw Often heavy paint + JS st-core live shift Set element.style CSS variables; browser composites the existing layers You need real-time, low-overhead updates: for fast-changi

0
ProgrammingDEV Community ·

HopeHunter: a local model that reads opportunity posts so my friend Zohaib doesn't have to

This is a submission for the Hacktoberfest Weekend Challenge: Build for a Friend I built this for Zohaib, who has sent me 400 links over the years. "You should apply for this." Scholarships, hackathons, junior roles, fellowships, grants. Half of them expired the week they arrived. The rest needed a page-by-page read of the eligibility rules before you could tell whether they were even for someone like me. So I asked him a question back: you're always asking where I find these — what if there were a tool that searched and just handed you the curated list?

0
ProgrammingDEV Community ·

Five Good Things — Staying Connected, Even When We Can't Talk

This is a submission for the Hacktoberfest Weekend Challenge: Build for a Friend. I built Five Good Things, a small private bot that helps two friends stay emotionally connected through a simple daily practice: sharing five good things that happened during the day. This project is personal. My friend is currently living in Ukraine, where daily life is affected by the ongoing war and shelling. We have a habit of telling each other five good things from our day.

← NewerPage 672 of 3153Older →