🛠️ All DevTools

[Other] VulnHunter: Capital One's agentic AI code security tool

[Other] Local-first code intelligence graph for MCP and CLI. Builds a persistent map of your codebase so AI coding tools read only what matters, with benchmarked context reductions on reviews and large-repo workflows.

[Other] Show HN: Mojibake – a low-level Unicode library written in C I&#x27;ve written Mojibake because I don&#x27;t like the other Unicode libraries for Unicode support.<p>It consists of only two amalgamation files: mojibake.h and mojibake.c. I&#x27;ve added all the most important Unicode algorithms, such as normalization, case conversion, segmentation, bidirectional text, collation, confusable, and others.<p>I regularly test it in these OSes: Linux, macOS, FreeBSD, OpenBSD, NetBSD, and Windows 11.<p>You can find a WASM demo on that site of all the public API functions and the documentation. If you want to participate, feel free to do it. Any kind of help is welcome. Check the CONTRIBUTING.md and API.md files in the GitHub repository for instructions on how to do it.

[Other] CVE-2026-25089: FortiSandbox unauthenticated command injection added to CISA KEV

[Other] Show HN: Vektorgeist- A platform for AI operators and their agent's VektorGeist is a platform designed for AI operators to discover, share, and distribute AI resources in one place. The platform brings together: AI tools MCP servers Prompts Workflows Templates Agents Technical articles A community for collaboration Recent updates include selectable layouts, customizable themes, an immersive interface, community profiles, and a marketplace for sharing projects and resources. The goal is to create a central hub where AI operators can find practical resources, contribute their own work, and collaborate with others without having to search across dozens of different platforms. Feedback is welcome, especially on: Overall user experience Features that would improve the platform Missing functionality Ideas for making it more useful for AI operators Website: <a href="https:&#x2F;&#x2F;vektorgeist.com" rel="nofollow">https:&#x2F;&#x2F;vektorgeist.com</a> Discord:<a href="https:&#x2F;&#x2F;discord.gg&#x2F;EEsMTJ73m" rel="nofollow">https:&#x2F;&#x2F;discord.gg&#x2F;EEsMTJ73m</a>

[Other] Mathematics of Data Science

[Testing] Show HN: Libretto PR agents – Automatically fix failing playwright scripts Libretto PR agents is a free TypeScript library for maintaining Playwright browser automations. Add one line of code to your existing Playwright scripts and it lets an agent automatically open GitHub PRs fixing the script when it fails.<p>A few months ago we released Libretto, a CLI + coding-agent skill for building deterministic browser automations. The idea was that for many browser workflows, especially repetitive business workflows, you don’t need an AI agent making decisions at runtime. You want deterministic Playwright scripts that are inspectable, faster to run, and much cheaper than repeatedly calling an AI browser agent.<p>That helped us generate Playwright and network-request-based scripts, but websites can often change which breaks deterministic scripts. So maintaining a variety of scripts at scale is a headache. If you already have a bunch of functioning Playwright scripts, the last thing you want is to rewrite everything around a new runtime AI framework like browser-use or stagehand just to make maintenance easier.<p>The Libretto PR Agent pulls your code from GitHub and connects via CDP to the browser session that just failed. It has an exec tool for injecting Playwright and javascript into the page, and once its inspected the failure, it opens a PR to your repo with a proposed code fix.<p>You use it like this:<p><pre><code> try { await automationLogic(page); } catch (error) { await playwrightDebugger.debugFailure(error, page); throw error; } </code></pre> The agent is completely free and open source, lets you bring your own LLM provider API keys, and works with any browser provider (including self hosted).<p>The source code is here: <a href="https:&#x2F;&#x2F;github.com&#x2F;saffron-health&#x2F;libretto&#x2F;tree&#x2F;main&#x2F;packages&#x2F;playwright-debugger" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;saffron-health&#x2F;libretto&#x2F;tree&#x2F;main&#x2F;package...</a><p>We think this makes browser integrations much easier to maintain, especially for teams that already have Playwright browser automation scripts in production and don’t want a full migration to get AI-assisted debugging and repair.<p>If you’re maintaining browser automations in production, would love to know what your debugging flow is currently and any feedback on this approach.

[Other] Agent-talk: Enabling coding agents to work together

[Other] Show HN: Leaves – A text-UI disk usage treemap visualizer GUI disk analyzers are great for figuring out what&#x27;s filling up your laptop&#x2F;desktop drive.<p>On containers or remote servers, the options are limited to purely text based utilities (e.g. du) or list-centric TUIs (e.g. ncdu) which are usually limited to viewing one directory at a time.<p>I created <i>leaves</i> to fill that gap.<p>Inspired by classic utilities like WinDirStat and KDirStat, it uses a 2-dimensional treemap^1 visualization to show the entire directory hierarchy with proportionally sized rectangles.<p>It&#x27;s performant enough to handle millions of files, thanks to Rust and multi-threading. However, block characters aren&#x27;t as suited as pixels for resolving a large number of items. Leaves can show file-type summaries per directory or partition the top-level directories by extension, allowing you to see not only where space is being used, but also how.<p>For instance, I can see the largest chunk of my home directory is taken up by uv caches for python and old Linux ISOs that I could easily re-download if needed. Or in a particular container, +600MB is used by standard Rust documentation and tutorials, and that it is the only location with HTML&#x2F;JS files, when only the libraries and build tools are needed (note to self: remember to use the <i>minimal</i> profile next time).<p>^1: <a href="https:&#x2F;&#x2F;github.com&#x2F;shundhammer&#x2F;qdirstat&#x2F;blob&#x2F;master&#x2F;doc&#x2F;Treemap.md" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;shundhammer&#x2F;qdirstat&#x2F;blob&#x2F;master&#x2F;doc&#x2F;Tree...</a>

[Other] Show HN: BambooGrid – Open-source web UI for power grid modeling and power flow Hi HN, I am co-founder of Kickstage, a software company specializing in solutions for the electrical industry and lately grid operators.<p>We are hiring engineers from different backgrounds, a lot of them software developers with limited experience in the sectors. Deep domain knowledge is key in our industry however, so we are constantly teaching the basics of power flow analysis, active vs reactive power, transmission line properties etc.<p>With Jupyter notebooks and the Python console only, that&#x27;s a tedious task and hardly ever led to a deep understanding of the topics.<p>So we built BambooGrid: a web-based editor on top of pandapower, a popular simulation library in our industry. You drag elements like buses, lines, loads generators and transformers onto a canvas, wire them up, set parameters and run power flow. It will print results directly on the canvas, color buses according to their voltages, even allows you to see an interactive admittance matrix.<p>You can try it out without installing anything on <a href="https:&#x2F;&#x2F;bamboo.kickstage.com" rel="nofollow">https:&#x2F;&#x2F;bamboo.kickstage.com</a> (thanks to our friends at Hostzero who sponsored hosting). Start with one of the included samples or draw your own. Just don&#x27;t forget to add a slack element.<p>Built on a Python backend (driven by the choice of pandapower mainly) and a React frontend. Fully MIT licensed, so feel free to use and modify to your liking. Even better: Give us feedback - we&#x27;re extremely open to suggestions how to improve the tool and are glad about every user who learns a bit more about power systems through it.<p>Šime, who built most of this, is also in the thread. We are both happy to answer anything about the implementation or power systems in general.

[API/SDK] Show HN: Open-source AI app builder you can embed into your own SaaS We just open sourced a first class our AI web app builder.<p>Instead of using another hosted AI coding platform, you can fork this project and build your own AI app builder, fully customized and running under your own brand.<p>It includes:<p>Next.js + TypeScript AI chat with streaming Artifact generation File explorer Code editor Live preview Databases Sandboxes to be used by AI agents Versions Responsive production-ready UI And a lot more...<p>The only required dependency is the Totalum API, which exposes the AI generation engine through a simple REST API. You can replace or extend the backend however you want.<p>It&#x27;s designed for developers, SaaS companies and agencies that want to:<p>Build their own AI app builder Add AI app generation to an existing product Create a white label AI builder Customize every part of the UI and workflow Self host the frontend<p>We use the same frontend in production, and decided to open source it so others don&#x27;t have to start from scratch.<p>Repository: <a href="https:&#x2F;&#x2F;github.com&#x2F;totalumlabs&#x2F;ai-app-builder-open" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;totalumlabs&#x2F;ai-app-builder-open</a><p>I&#x27;d love feedback, feature requests, or ideas from the HN community.

[Testing] Show HN: Sentinel – open-source QA agent that reads your code before it clicks

[Other] Show HN: Docs.dev Your Own Hosted Docs Platform in Minutes Hey we are launching Docs.dev, a full feature docs product that lets you host your developer docs on Cloudflare in a couple minutes.<p>Why this exists:<p>We don’t think every early stage startup should need to pay $300-$500 a month for beautiful docs, in fact every startup should just have beautiful human and agent ready docs ready to go. Additionally the workflow for docs is a lot different now in that Claude Code or Codex will generate 60-80% of the code, so why not have them update your docs as well. After they generate the docs, the missing piece is there will be some sentences, sections, and codeblocks maybe you want to eyeball or edit. The Docs.dev docs allows you to do it right in place in that your docs powered by Docs.dev, is the place that both your readers can learn and read about your tool but also the direct place you can edit your docs.<p>If you want to check out how it works see the demo at <a href="https:&#x2F;&#x2F;docs.dev" rel="nofollow">https:&#x2F;&#x2F;docs.dev</a>.<p>Some features:<p>- Ask AI using your own Cloudflare AI - Docs are editable and publishable in place exactly how users see the docs - AI generation tools built into the editor(again using your own Cloudflare) - Full markdown support for agents, every docs page can be served as MD - Docs can be served as MCP - Pretext.js editor allows images to be inline with the text<p>Built upon other cool technology:<p>- Fumadocs - Pretext - Cloudflare primitives - Other cool libraries<p>This is a side project from us at Keyboard.dev, so right now we want to support making this product better but we are looking at this more as a gift to the community. Essentially before our pivot we had the domain for docs.dev so wanted to build something cool in the docs space.

[Other] Guide to data tools landscape for developers

[Other] We're Building Postgres in Rust. Using the LLVM of Databases

[Other] Show HN: Trying to fix the web scraping industry's benchmark problem We&#x27;ve been trying to evaluate web scraping companies, but when you look at their benchmarks, you can&#x27;t verify anything, and they mostly exist to prove the company is successful. They put somewhere between 98% and 100% because they pick their own urls, define success their own way, and don&#x27;t publish the harness. We also saw companies like scrapfly astroturf websites like scrapeway and call them independent.<p>So, we built an open source benchmark that we want to represent the frontier of web data. We&#x27;re trying to look across all major anti-bot providers and industries, to build a comprehensive hard-target test set. It&#x27;s all in the repo, you can run it, and we pledge to maintain it monthly.<p>Curious what people think we could do to improve it? Would you change any of the conditions, add sites, etc. Our target list and pass criteria are something we&#x27;re trying to improve, so would love to get feedback from the community on how we can actually provide something useful for people to test against!

[Other] Show HN: Algotrek – Algorithms visualized, problem shape shifting and a tutor I created the kind of product that would actually help me pass the coding round. Never in my life have I ever advanced past the coding round. Couldn&#x27;t do it to save my life. But now, I have a tutor who can explain and morph problems and explain them to me in a smooth brained way until I get it. Since the visuals also follow the tutors explanation, I can iterate until a DSA pattern sticks and solution patterns are easy for my brain to reproduce when in the hot seat. Try it out, find a problem that you struggled (struggle) with and let me know if the tutor provides anything helpful. The unique thing to note is that, you can take any standard problem and expand it, change its operation parameters so that nothing is static, all with the goal of truly understanding why and how the solution works.

[Other] Let's Build PlanetScale from Scratch: Infrastructure

[Other] Show HN: Forall – An AI coding agent that generates machine-checkable proofs We&#x27;ve been working on an open-source coding agent that generates code alongside machine-checkable proofs. We&#x27;d love feedback from the HN community, especially from people interested in formal verification, Lean, Dafny, or AI coding agents. Currently, only 3 langauges can be verified.

[Other] Show HN: Firefox in WebAssembly This is the entire Firefox browser rendering to a &lt;canvas&gt; element. Gecko, all UI components, and the Spidermonkey JS engine are all compiled and running in WebAssembly.<p>Here are a few things you might find interesting:<p>- This is fully end to end encrypted! We use the WISP protocol for TCP-over-websockets.<p>- There is a novel WASM-&gt;JS JIT for experimental site speedup<p>- This port cost over 25k in opus&#x2F;fable tokens for debugging and JIT research<p>This was just a fun experiment to push the boundaries of WebAssembly. For a more usable &quot;browser in browser&quot; experience, we also built <a href="https:&#x2F;&#x2F;github.com&#x2F;HeyPuter&#x2F;browser.js" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;HeyPuter&#x2F;browser.js</a> that eats a bit less RAM.