yatsyk
yatsyk on Hacker News
I mainly use Claude Code, but I had an idea to build an orchestrator for coding agents, so I experimented with several
Skills live in two source-of-truth git repos (private and public). Agents edit skills by my request, and syncs to all coding agents ~/.claude/skills/, ~/.codex/skills, ~/.pi/agent/skills, ~/.config/opencode/skills etc. with agent written sync-agent-skill script. script ensures that no local changes was made in-place.
I prefer to use Zod or JSON Schema as the source of truth. Then I use QuickType [1] in the build process to generate code in different languages. This lets me share data structures. I mostly do this in Tauri apps to keep the same data shape in TypeScript and Rust. I also use it to define protocols, like for REST APIs.
Here are the advantages of this approach compared to using guts lib:
- I get validation with clear error messages.
- It supports many languages out of the box.
- I don’t need to maintain a custom library.
- JSON Schema is well supported in LLMs (for example, with structured output or vibe coding).
[1] https://quicktype.io/
I’m more focused on the situation from Musk’s point of view, not yours. Maybe your view is less controversial. But I don’t think Musk sees China and Russia as failed states. He’s said many positive things about both countries.
If he had written that Western Europe is moving toward China’s model, I would have had no questions about his tweet and would have fully supported it.
As I understand it, Durov doesn’t agree with your statement — you can check point 5 of his 2014 manifesto [1]
[1] https://globalvoices.org/2014/03/13/pavel-durovs-seven-reaso...
I share Durov’s disappointment about where the internet is heading.
But I think it’s hypocritical to talk about freedom of speech issues in Western Europe while ignoring similar or worse restrictions in China, Russia, or Dubai, where he lives.
It’s similar to Musk’s approach — when Twitter is shut down in Brazil, it’s a freedom of speech violation, but having a Tesla factory in China suddenly makes that problem disappear there.
Posted by
yatsyk on Monday February 17, 2025 @11:15PM
from the ask-hn dept.
Most content I find on Cursor AI is either super basic or just covering new features that haven’t really proven themselves yet. I’m looking for real-world examples of advanced usage—cases where it actually helps with complex programming tasks.
Hello HN,
I've created npm module for cushion treemap rendering [1]. Treemaps is most compact way to visualize huge tree structures such as file sytem.
[1] https://treemap.yatsyk.com/
Posted by
yatsyk on Wednesday August 11, 2021 @12:09PM
from the show-hn dept.
Usually I'm adding linuxserver/smokeping docker container to boxes I want to check internet speed history.
I've not found in docs anything related to static site configuration files (like netlify.toml or vercel.yml in hosted services). How to configure particular site?
Posted by
yatsyk on Monday July 20, 2020 @02:23PM
from the engadget.com dept.
Posted by
yatsyk on Wednesday July 15, 2020 @02:45PM
from the react-spectrum.adobe.com dept.
Author here.
This tool allows to create transport schemas such as metro maps. You can import data from open street map data to save time or start from scratch. Maps stored in git repository so you can consider this editor like headless CMS for static site and in order to edit schema created by other user you need to fork it.
Posted by
yatsyk on Thursday July 02, 2020 @08:13AM
from the show-hn dept.
If someone used strapi and parse platform, how would you compare two platforms as self hosted api backends?
For example: can I connect one port of node to other port of node and how this connection needs to be drawn.
I can’t justify redux usage apart from legacy support. Mobx (preferred) or hooks for some apps/components.
When you start development version of Windows CE or Windows Embedded (don’t remember exactly which one) tick count timer wasn’t set to zero but max dword minus number of milliseconds in two minutes. So counter overflows in 2 minutes after system start. This is very smart way to catch such bugs.
Next is limited to browsers and doesn't prescribe how you access data. I would compare redwood to meteor.js but not next.js.
Congratulation on launching!
I like rails, but in js world may be not so good idea to reimplement or integrate everything related to ui, routing etc. Meteor.js was not very successful with this model. I think routing or UI on react-native/web/blessed/VR is too different to be part of one framework.
But I see the usefulness of framework with functionality related to data fetching and business logic.
I consider perfect stack for this things is Postgress->Hasura (or also Prisma)->mst-gql->mobx-state-tree. You create database schema and everything up to models on client is autogenerated and each part of this stack could be updated, customized or completely rewritten. This stack could be used on react-native or web or any other js platform.
I'm not asserting that couch is unsecure, I need such database but the problem that I can't see any resource that could help me design secure production system.
You can check even trivial rails blog or todo example from some book and it will be limited in scope but more or less secure. I'm having hard time to find secure couchdb example.
> Security for all systems is non trivial.
But not equally hard.
If you use firebase you should understand that you getting vendor lock-in and in some cases you can spend much more money, but for some types of projects this platform is ok for me.
Same with couchdb, I understand that if I get replication with client, I need to pay by reorganising data or may be spend more resources to make system secure. There is no free lunch.
No I'm not assuming constraint on the number of comments. First example shows how easy limit number created objects.
Spam prevention is other topic not so trivial but mostly solved problem.
Couch is not equivalent to mongo or relational because it accessible to clients if we want synchronisation. Securing app server is manageable problem and there is huge number of resources how to do it correctly.
In case of couch I've not seen any secure open-source example.
I'm not focused on DOS attacks, I'm just proposing different attack vectors.
If you need to limit the number of items it is trivial. You need to write something like `has_many :things, :before_add => :limit_things` in app server or create constraint in sql.
Spam prevention is not trivial but mostly solved problem. You can find a lot of articles about this topic.
But creating secure couchdb looks like very non-trivial.
It’s trivial to limit number of created documents in postgres, couchdb or application server though validation, I’m talking about updating document not creating new. In posgres if I update 1mb document used space will not always grow. In couch db situation is different. In case of relation db you have application server with custom logic and validations, couchdb from other side is accessible from outsize.
My idea that it’s very hard to create safe couchdb based system and most recommendations limited to setup nginx proxy and authenticate users which is not enough.
> What kind of document are you looking for here?
> There is [1], but yeah, that covers access controls. As do the MongoDB [2] and Postgres [3] documents.
Mongo and postgress usually is not accessible for clients only for backend. Security handled by backend mostly and there is a plenty of resources how to implement secure server side applications which discusses attack vectors and how to make secure apps. Thankfully to this thread I’ve got few good ideas, that may help to design secure couchdb architecture (such as remove _find endpoint) but I’ve not seen any in-depth document about couchdb.
> I feel like your thinking about Couch as exposing your entire PostgreSQL DB to the internet
No, why do you think so?