🛠️ Hacker News Tools

[CLI Tool] Show HN: axil – A terminal user-interface for treesitter I initially wrote axil to help inspect and run queries against syntax trees for my treesitter-based language server implementation (<a href="https:&#x2F;&#x2F;github.com&#x2F;terror&#x2F;just-lsp" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;terror&#x2F;just-lsp</a>), and have been working toward making this into something more useable :)

[CLI Tool] Show HN: Zerobox – Sandbox any command with file, network, credential controls I&#x27;m excited to introduce Zerobox, a cross-platform, single binary process sandboxing CLI written in Rust. It uses the sandboxing crates from the OpenAI Codex repo and adds additional functionalities like secret injection, SDK, etc.<p>Watch the demo: <a href="https:&#x2F;&#x2F;www.youtube.com&#x2F;watch?v=wZiPm9BOPCg" rel="nofollow">https:&#x2F;&#x2F;www.youtube.com&#x2F;watch?v=wZiPm9BOPCg</a><p>Zerobox follows the same sandboxing policy as Deno which is deny by default. The only operation that the command can run is reading files, all writes and network I&#x2F;O are blocked by default. No VMs, no Docker, no remote servers.<p>Want to block reads to &#x2F;etc?<p><pre><code> zerobox --deny-read=&#x2F;etc -- cat &#x2F;etc&#x2F;passwd cat: &#x2F;etc&#x2F;passwd: Operation not permitted </code></pre> How it works:<p>Zerobox wraps any commands&#x2F;programs, runs an MITM proxy and uses the native sandboxing solutions on each operating system (e.g BubbleWrap on Linux) to run the given process in a sandbox. The MITM proxy has two jobs: blocking network calls and injecting credentials at the network level.<p>Think of it this way, I want to inject &quot;Bearer OPENAI_API_KEY&quot; but I don&#x27;t want my sandboxed command to know about it, Zerobox does that by replacing &quot;OPENAI_API_KEY&quot; with a placeholder, then replaces it when the actual outbound network call is made, see this example:<p><pre><code> zerobox --secret OPENAI_API_KEY=$OPENAI_API_KEY --secret-host OPENAI_API_KEY=api.openai.com -- bun agent.ts </code></pre> Zerobox is different than other sandboxing solutions in the sense that it would allow you to easily sandbox any commands locally and it works the same on all platforms. I&#x27;ve been exploring different sandboxing solutions, including Firecracker VMs locally, and this is the closest I was able to get when it comes to sandboxing commands locally.<p>The next thing I&#x27;m exploring is `zerobox claude` or `zerobox openclaw` which would wrap the entire agent and preload the correct policy profiles.<p>I&#x27;d love to hear your feedback, especially if you are running AI Agents (e.g. OpenClaw), MCPs, AI Tools locally.

[Other] Queueing Requests Queues Your Capacity Problems, Too

[CLI Tool] Show HN: CLI to order groceries via reverse-engineered REWE API (Haskell) I just had the best time learning about the REWE (German supermarket chain) API, how they use mTLS and what the workflows are. Also `mitmproxy2swagger`[1] is a great tool to create OpenAPI spec automatically.<p>And then 2026 feels like the perfect time writing Haskell. The code is handwritten, but whenever I got stuck with the build system or was just not getting the types right, I could fall back to ask AI to unblock me. It was never that smooth before.<p>Finally the best side projects are the ones you actually use and this one will be used for all my future grocery shopping.<p>[1]<a href="https:&#x2F;&#x2F;github.com&#x2F;alufers&#x2F;mitmproxy2swagger" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;alufers&#x2F;mitmproxy2swagger</a>

[Other] Show HN: React-Rewrite – Figma for localhost that directly edits your codebase

[Other] Claude Code runs Git reset –hard origin/main against project repo every 10 mins

[Other] Build123d: A Python CAD programming library

[Other] Show HN: Crazierl – An Erlang Operating System Crazierl is an experimental&#x2F;hobby operating system based around BEAM.<p>I&#x27;ve linked the browser based demo; I don’t recommend using a phone; it does work, slowly, on the phones I tested, but it’s very awkward to use. You can share a link with a hashtag with your friends and click the consent checkbox, and it (should) link up into dist and I’ve also included a chat application you can start with chat:start(). (quit chat with &#x2F;quit, or use the shell menu with ctrl-g to switch between shells etc).<p>The browser demo relies on the v86 javascript x86 virtual machine. You can also run Crazierl on a real x86 system, but I’ve had mixed luck on modern systems, it uses some esoteric legacy VGA features and support for that isn’t getting better.<p>Crazierl is fairly limited: 32-bit x86, BIOS boot, only two NIC drivers virtio-net and realtek 8168. But it&#x27;s got enough to become part of an Erlang dist cluster. It also supports SMP, but it’s crashy with high core counts in qemu; there’s almost certainly several concurrency bugs in the kernel. There&#x27;s also a lot of excess tcp debug spew (sorry).<p>Source code is available (Apache) <a href="https:&#x2F;&#x2F;github.com&#x2F;russor&#x2F;crazierl&#x2F;" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;russor&#x2F;crazierl&#x2F;</a>

[Other] Show HN: DeepRepo – AI architecture diagrams from GitHub repos

[Other] An Introduction to Writing Systems and Unicode

[Other] Show HN: /slot-machine development (CC vs. Codex; CE vs. superpowers) I built an opensource skill that runs N implementations in parallel, has each one reviewed blind by a separate agent, then a judge picks the winner or synthesizes the best parts of each.<p>Each slot can use a different skill (CE:work in one vs superpowers:test-driven-development) and harness (CC vs. Codex). Or put different emphasis on each slot (functional vs. robustness). Also works for non-coding tasks (writing) and you can create custom slot-machines.<p>The main insight is simple enough: AI agents are probabilistic. The same spec produces different code every time; different designs, different bugs, different quality.So running parallel implementations can increase quality if we can judge effectively.<p>There is a real tradeoff here of increased time and tokens for quality but for production code this is often worth it; particularly on long running overnight loops on subscription plans. Also a simple way to learn which skills and harnesses actually work best for your codebase.<p>Appreciate any feedback &#x2F; PRs. This is early!

[Other] Emacs-libgterm: Terminal emulator for Emacs using libghostty-vt

[Other] Show HN: BreezePDF – Free, in-browser PDF editor BreezePDF lets you edit, sign, merge, compress, redact, OCR, fill forms, extract tables, and use 30+ more PDF tools — all in the browser, no sign-up. Files never leave your computer.<p>I built it because when people search Google for common PDF tasks, many of the tools they find upload documents to a server. I wanted an option that keeps files local instead.<p>I posted an earlier version on HN last spring: <a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=43880962">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=43880962</a><p>At the time it only supported a small set of features. Over the last 10 months I rebuilt large parts of it and expanded it to nearly 40 tools, including several ideas that came from comments in that earlier thread.<p>There is also now a desktop app for macOS, Windows, and Linux, plus a CLI&#x2F;SDK for developers.

[Other] Show HN: Sheet Ninja – Google Sheets as a CRUD Back End for Vibe Coders

[Other] Lat.md: Agent Lattice: a knowledge graph for your codebase, written in Markdown

[Other] Show HN: Home Maker: Declare Your Dev Tools in a Makefile A developer&#x27;s machine accumulates tools fast. A Rust CLI you compiled last year, a Python formatter installed via `uv`, a language server pulled from npm, a terminal emulator from a curl script, a Go binary built from source. Each came from a different package manager, each with its own install incantation you half-remember.<p>I wanted a way to declare what I need without adopting a complex system like Nix or Ansible just for a single laptop. The result was a plain old Makefile.<p>I wrote a short post on using Make (along with a tiny bash script and fzf) to create a searchable, single-command registry for all your local dev tools. It’s not a new framework or a heavy tool—just a simple way to organize the package managers we already use.<p>If you&#x27;re tired of losing track of your local environment, you might find it useful.

[Other] TreeTrek – A raw Git repository viewer web app

[Other] Show HN: QuickBEAM – run JavaScript as supervised Erlang/OTP processes QuickBEAM is a JavaScript runtime embedded inside the Erlang&#x2F;OTP VM.<p>If you’re building a full-stack app, JavaScript tends to leak in anyway — frontend, SSR, or third-party code.<p>QuickBEAM runs that JavaScript inside OTP supervision trees.<p>Each runtime is a process with a `Beam` global that can: - call Elixir code - send&#x2F;receive messages - spawn and monitor processes - inspect runtime&#x2F;system state<p>It also provides browser-style APIs backed by OTP&#x2F;native primitives (fetch, WebSocket, Worker, BroadcastChannel, localStorage, native DOM, etc.).<p>This makes it usable for: - SSR - sandboxed user code - per-connection state - backend JS with direct OTP interop<p>Notable bits:<p>- JS runtimes are supervised and restartable - sandboxing with memory&#x2F;reduction limits and API control - native DOM that Erlang can read directly (no string rendering step) - no JSON boundary between JS and Erlang - built-in TypeScript, npm support, and native addons<p>QuickBEAM is part of Elixir Volt — a full-stack frontend toolchain built on Erlang&#x2F;OTP with no Node.js.<p>Still early, feedback welcome.

[Other] Show HN: Git bayesect – Bayesian Git bisection for non-deterministic bugs

[Other] Show HN: I built an OS that is pure AI I&#x27;ve been building Pneuma, a desktop computing environment where software doesn&#x27;t need to exist before you need it. There are no pre-installed applications. You boot to a blank screen with a prompt. You describe what you want: a CPU monitor, a game, a notes app, a data visualizer and a working program materializes in seconds. Once generated, agents persist. You can reuse them, they can communicate with each other through IPC, and you can share them through a community agent store. The idea isn&#x27;t that everything is disposable. It&#x27;s that creation is instant and the barrier to having exactly the tool you need is just describing it.<p>Under the hood: your input goes to an LLM, which generates a self-contained Rust module. That gets compiled to WebAssembly in under a second, then JIT-compiled and executed in a sandboxed Wasmtime instance. Everything is GPU-rendered via wgpu (Vulkan&#x2F;Metal&#x2F;DX12). If compilation fails, the error is automatically fed back for correction. ~90% first-attempt success rate.<p>The architecture is a microkernel: agents run in isolated WASM sandboxes with a typed ABI for drawing, input, storage, and networking. An agent crash can&#x27;t bring down the system. Agents can run side by side, persist to a local store, and be shared or downloaded from the community store.<p>Currently it runs as a desktop app on Linux, macOS, and Windows. The longer-term goal is to run on bare metal and support existing ARM64 binaries alongside generated agents. A full computing environment where AI-generated software and traditional applications coexist.<p>Built entirely in Rust.<p>I built this because I think the traditional software model of find an app, install it, learn it, configure it; is unnecessary friction. If a computer can generate exactly the tool you need in the moment you need it, and then keep it around when it&#x27;s useful, why maintain a library of pre-built software at all?<p>Free tier available (no credit card). There&#x27;s a video on the landing page showing it in action.<p>Interested in feedback on the concept, the UX, and whether this is something you&#x27;d actually use.