SShortSingh.

Programming

0
ProgrammingDEV Community ·

Two AI reviewers, one Fastify PR, and a 404 that quietly became a 414

I ran two AI code reviewers from different vendors over the same merged pull request. One of them found nothing. The other found a behavior change that is still in Fastify today, and it was wrong about one important detail. This is what happened, how I checked it, and what I changed in my own tool because of it. fastify#6716, "feat: add support of onMaxParamLength", merged in May and first released in v5.9.0.

0
ProgrammingDEV Community ·

I Built My Dad a Local AI Translator for His Stock Research

This is a submission for the Hacktoberfest Weekend Challenge: Build for a Friend. I built Argus Friend Brief, a local AI research translator for my dad. My dad uses Argus, a stock-research dashboard I built for our family, every day. It tracks 53 companies across AI infrastructure, semiconductors, power, cooling, networking, and emerging compute. Argus brings prices, technical metrics, peer-relative valuation, news, SEC filings, and bull/bear theses into one place.

0
ProgrammingDEV Community ·

What we learned fine-tuning our own coding model on a $100 budget

We're a small team at ElderAI building ATLAS Code, a coding model for agent tools (Cline, Aider, Continue, Cursor and anything else that takes an OpenAI-compatible base URL). We do our own training runs on rented GPUs with about $100 of prepaid compute. Here's an honest account of the last two days. The short version: none of our fine-tunes has cleared its quality gate yet. That's why the invite-only preview still runs the starting checkpoint we're trying to improve.

0
ProgrammingDEV Community ·

Node.js Feature Flag Safety: Kill Switch Control for Marketplace Incidents

Use a server-side flag to stop new notification delivery attempts, but do not call the incident contained until the queue has stopped producing failures. Short answer: a useful kill switch changes one narrow runtime decision, emits an audit event, and leaves failed jobs available for deliberate replay. For a marketplace notification service, that means disabling delivery while preserving the order, seller, channel, and attempt context needed to recover later. The decision rule is blunt: flip the switch when failed deliveries represent a real user-impacting condition, not merely when one provid

0
ProgrammingDEV Community ·

Go Realtime Queues: What One Key Buys Gaming Presence During Reconnects

The page says a game room has 84 connected players while only 79 are actually active. Carrying one key across realtime ingress and queues lets on-call connect each delayed presence update to the connection lifetime that produced it; without that link, reconnects, queue lag, and state writes are visible but their causal order is not. The first action is to stop treating those events as interchangeable. Short answer: one stable key carried through the realtime path and the queue gives every observation about a single connection lifetime the same name. For a beginner, that buys correlation, order

0
ProgrammingDEV Community ·

Create an AI Voice Assistant with ElevenLabs and Node.js

Why ElevenLabs is a Game‑Changer for Voice AI If you’ve ever tried to build a voice assistant, you know the biggest headache is getting natural‑sounding speech. Traditional TTS engines either sound robotic or require massive amounts of data and compute. ElevenLabs solves both problems with a cloud API that delivers studio‑grade speech and even lets you clone a voice in minutes. The best part? You can start using it from a simple Node.js script and scale up to full‑blown conversational agents.

0
ProgrammingDEV Community ·

Running a Small LLM Locally to Parse Bank Notifications: Structured Output with Ollama, Pydantic and a Regex Safety Net

Tuần này trên Dev.to có một project khá hay: Kharcha, dùng model 4B chạy local để đọc SMS ngân hàng ở Ấn Độ, dữ liệu tiền bạc không rời khỏi laptop. Trên HN thì antirez (tác giả Redis) cũng đang làm chuyện chạy LLM local. Mình thấy ý tưởng này hợp với dev Việt Nam. Ngày nào mình cũng nhận cả chục tin báo biến động số dư từ Vietcombank, Techcombank, MB... Muốn tự làm app quản lý chi tiêu thì cách nhanh nhất là gửi hết lên OpenAI.

0
ProgrammingDEV Community ·

BrainShot — Turn Your Camera Roll Into a Document Library

This is a submission for the "Hacktoberfest Weekend Challenge: Build for a Friend" (https://dev.to/challenges/hacktoberfest-weekend-2026-10-01) What I Built BrainShot is a simple document digitization app built around a problem that almost everyone has: You take a photo of an important receipt, invoice, warranty, letter, or form — and then it disappears into your camera roll. BrainShot turns that photo into a clean, structured digital copy. The workflow is: Snap → Extract → Organize → Save → Find later You can: 📸 Take a document photo or upload one 🧠 Detect the document type ✨ Extract import

0
ProgrammingDEV Community ·

My Server Files Its Own Tickets, Then Waits for My Signature to Heal Itself

This is a submission for the Sanity Challenge, Path Two: Vibe-Code Something Strange Servers crash at 3 AM. A human wakes up, SSHs in, types systemctl restart, and goes back to sleep. I wondered if the ticket could do that work instead. Ops Brain is a server that files its own incident reports in Sanity and heals itself, but only after a human approves. The loop: A small Python agent watches my Ubuntu machine.

0
ProgrammingDEV Community ·

Telegram-бот с ИИ для заявок: архитектура без лишнего

Типичный запрос малого бизнеса: «Хочу бота, который отвечает клиентам и собирает заявки». Если строить с нуля, легко переусложнить. Разберём минимальную рабочую схему и где в ней место языковой модели. Меню, кнопки, сбор контактов, пересылка заявки менеджеру. Здесь ИИ не нужен вообще: сценарий до 10 веток описывается заранее, работает предсказуемо и дёшево.

0
ProgrammingDEV Community ·

Notification Cost Attribution: Structured JSON API Logs for Small SaaS

For a small SaaS app, keep one compact, structured delivery outcome per attempt in the searchable logging service, and move verbose diagnostic context out of that tier before shortening retention. The dominant cost is usually determined by multiplication: attempts per day, bytes per event, indexed-field overhead, and retained days. A simple service is one whose bill can be assigned to a tenant, channel, and outcome without putting message bodies or exception dumps into every record. TL;DR: start with a byte budget and an event budget, not a dashboard tour. Preserve the fields needed to count a

0
ProgrammingDEV Community ·

SaaS App Health Monitoring: Forensic Evidence for Silent Node Cron Jobs

Make every Node.js SaaS app import emit durable completion evidence, then make uptime monitoring alert on its absence only after the expected delivery window. The deciding constraint is incident reconstruction: a green web health endpoint can prove that the app answers requests, but it cannot prove that yesterday's customer-support import fetched records, committed them, and made them searchable. Short answer: for a Node.js SaaS app with US and EU users, combine external uptime health checks with a separate cron missed-run detector; record one terminal event for every scheduled import and page

0
ProgrammingDEV Community ·

Why the OpenTelemetry browser SDK wouldn't start on Safari 17

On September 30 someone filed an issue on the OpenTelemetry browser SDK. startBrowserSdk was throwing TypeError: URL.parse is not a function on older browsers, so the SDK never started there at all. Nothing caught the error, so an app that started the SDK on load (the issue's example was while rendering a React provider) went down with it. Blank page, in production builds. The issue came with a clean reproduction too (Chromium 125 failed, Chromium 127 started fine), which made it easy to pick up.

0
ProgrammingDEV Community ·

I Built GradShift for My Friend Who Had Zero Corporate Exposure — Class of 2026 Companion

This is a submission for the Hacktoberfest Weekend Challenge: Build for a Friend I started building for one friend. His whole batch uses it now. GradShift — Campus to Corporate Companion My friend, Class of 2026, got his first corporate offer and texted at 2am: "Am I good enough? I have zero corporate exposure." He's BTech, but this is everyone straight out of campus — BTech, BCom, BA, BSc, BBA, MBA — any degree, first job, no idea how corporate actually works. GradShift is what a senior friend would tell you at 2am in the hostel corridor.

0
ProgrammingDEV Community ·

Nobody Owns These Cameras: The Security Problem Hiding on America's Public Roads

Last month, a county employee in Florida walked a stretch of public road and counted fourteen cameras that nobody had authorized. Three belonged to the sheriff's office. The other eleven had no publicly identified owner, no permit on file, and no agency that could answer the question commissioners cared about: who can search what these devices recorded (Source: WPEC/CBS12, 2026; Gadget Review, 2026). Atlanta-based Flock Safety says it operates more than 120,000 of these devices nationwide (Source: Flock Safety, 2026). At that scale, the question is no longer whether the cameras exist.

0
ProgrammingDEV Community ·

Prep Buddy: an AI interview coach for my classmate that runs on his laptop with the Wi-Fi off

This is a submission for the Hacktoberfest Weekend Challenge: Build for a Friend Aman is my classmate. We're both in final-year B.Tech, and like everyone in our batch he's preparing for campus placements: SDE-1 roles, which means technical rounds on DSA, DBMS, Operating Systems, Networks and OOP, plus an HR round. When I asked him how his prep was going, he wasn't sure. He was putting in the hours, but he couldn't tell which topics were actually weak. Nobody was asking him questions and telling him what he'd missed, so he kept revising the topics he was already comfortable with.

0
ProgrammingDEV Community ·

A Deactivated User With a Live Token: Reading Concrete CMS CVE-2026-85387 as a Revocation Gap

A Deactivated User With a Live Token: Reading Concrete CMS CVE-2026-85387 as a Revocation Gap Revocation is the part of identity that nobody tests Identity work concentrates on issuing credentials and verifying them. Revoking them is treated as an administrative outcome rather than a security control. CVE-2026-85387 in Concrete CMS is a useful case because the defect sits entirely inside that neglected half of the lifecycle. Concrete CMS before 9.5.4 re-authorized OAuth REST API requests from the bearer token alone. The resource server's authorization validator confirmed that a token existed,

← NewerPage 702 of 3156Older →