A small, shared skill library by builders, for builders. (human and agent)
Hacker News (score: 15)Description
More from Hacker
Show HN: Sandboxing untrusted code using WebAssembly
Show HN: Sandboxing untrusted code using WebAssembly Hi everyone,<p>I built a runtime to isolate untrusted code using wasm sandboxes.<p>Basically, it protects your host system from problems that untrusted code can cause. We’ve had a great discussion about sandboxing in Python lately that elaborates a bit more on the problem [1]. In TypeScript, wasm integration is even more natural thanks to the close proximity between both ecosystems.<p>The core is built in Rust. On top of that, I use WASI 0.2 via wasmtime and the component model, along with custom SDKs that keep things as idiomatic as possible.<p>For example, in Python we have a simple decorator:<p><pre><code> from capsule import task @task( name="analyze_data", compute="MEDIUM", ram="512mb", allowed_files=["./authorized-folder/"], timeout="30s", max_retries=1 ) def analyze_data(dataset: list) -> dict: """Process data in an isolated, resource-controlled environment.""" # Your code runs safely in a Wasm sandbox return {"processed": len(dataset), "status": "complete"} </code></pre> And in TypeScript we have a wrapper:<p><pre><code> import { task } from "@capsule-run/sdk" export const analyze = task({ name: "analyzeData", compute: "MEDIUM", ram: "512mb", allowedFiles: ["./authorized-folder/"], timeout: 30000, maxRetries: 1 }, (dataset: number[]) => { return {processed: dataset.length, status: "complete"} }); </code></pre> You can set CPU (with compute), memory, filesystem access, and retries to keep precise control over your tasks.<p>It's still quite early, but I'd love feedback. I’ll be around to answer questions.<p>GitHub: <a href="https://github.com/mavdol/capsule" rel="nofollow">https://github.com/mavdol/capsule</a><p>[1] <a href="https://news.ycombinator.com/item?id=46500510">https://news.ycombinator.com/item?id=46500510</a>
Serverless backend hosting without idle costs – open-source
Serverless backend hosting without idle costs – open-source
Show HN: AWS-doctor – A terminal-based AWS health check and cost optimizer in Go
Show HN: AWS-doctor – A terminal-based AWS health check and cost optimizer in Go
Log level 'error' should mean that something needs to be fixed
Log level 'error' should mean that something needs to be fixed
No other tools from this source yet.